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SECTION I 


INTRODUCTORY REMARKS 


Paragraph 


Resume of preceding information_ __ ____ ____ _____________ ______ _____ ___ 
1 
Sequence of study__ __ ______ __________ __ ____ _______ __ ________ ______ __ 
2 


1. Resume ofprecedinginformation.-a. In Special Text No. 
165 (1935), Elementary Military Cryptography, the student was 
given his first introduction to the study of the more simple means 
and methods of secret writing. Considerable attention was devoted 
to certain preliminary data in the nature of definitions of basic terms 
employed in cryptography and of the general circumstances surrOlmd- 
ing the use of cryptography in military communications. The factors 
determining the influence or effect that the analysis of military 
cryptograms will have on the tactical situation were discussed some- 
what in detail, and it was shown that of these factors the most im- 
portant is the degree of cryptographic security inherent in the cryp- 
tographic system itself. This was then discussed in detail in con- 
nection with related factors involved in the length of time required to 
solve milita.ry cryptograms. Attention was also dil:ccted to infor- 
mation bearing upon the employment of cryptography in our Army, 
and the functions, duties, and responsibilities of the various arms and 
services concerned in it were set forth. Coming then to a discussion 
of certain prelllninary details of a practical nature, it was shown that 
systems suitable for the military use must conform to certain more 
or less rigid requirements before they can even be considered for such 
use because of the present-day limitations of the art of signal com- 
munication in general. 
b. Having assimilated all the foregoing data of an introductory 
nature, the student then took up the study of the two principal classes 
of cryptograms: transposition and substitution. Various examples 
of cipher systems of the transposition class were first illustrated, these 
starting out with the simplest varieties of monoliteral route trans- 
position and then progressing through more complex types of simple 
columnar and keyword columnar methods. Only a hint was con- 
veyed as to the existence of far more complicated double and triple 
transposition systems. The principal disadvantages of transposition 
methods in general were discussed. Then substitution systems were 
taken up and after a brief discussion of the nature of alphabets in 
general and of the kinds of cipher alphabets in particular, a few 
examples of simple monoalphabetic substitution ciphers were given. 


(1) 


2 


Methods of producing mixed alphab ts w re illustrated, and the use of 
sliding basic sequences to derive a set of s con lary alphabets Wlt9 
described. 
Cases of monoalphabetic subsLituLion wit,h variants wete 


presented and Lheil: disadvanLagcs from Lh point of view of crypto- 
graphic security were discuss d. It was s(,atod that despit a multi- 
plicity of values for cipher oquivalon(,s, such m t,hods do not yield 
cryptograms of a high degree I s urity, and for t,his reason oLbc:c 
methods of producing a muHipli it,y of vnlucs, based upon (,rue poly-- 
alphabetic methods, are mor satisfactory. Th usc of cipher disks 
and cipher tables of various sor(,s was discuss d in conncdion ,vjth 
more complicated t,yp s of subsLitution, and their disadvantages 
pointed out. 
Mention was made of moLhods of increasing the degree 
of cryptographic security by suppressing or olimiuat,ing the manifes~ 
tations of periodicity in polyalphabotic sys(,oms based upon the use 
of a repeating key. 
Those 1 d t.o a consid rat,ion of t,h development 


and use of cryptographs and cipher machines, a f w of which were 
merely mentioned. 
c. The category of subst,itution methods under the heading of code 
systems was then discussed and oxampl s of t.h various types of code 
words and cod book anallgomonts given. 
Th discussion included a 


comparison of tho advantages and disadvanLagcs of cipher and code 
methods from the point of view of simplicit,y, mpidiLy, practicability, 
secrecy, accuracy, and economy. 
Considerable att,enLion was devoted 


to the secrecy requiremcnLs of a erypt,ogmpluc syst, m for military use. 


d. There then followed a brief discus ion of (,be errors whlch are 
almost inevitable in cryptographic communication, and of methods for 
their suppression and climinat,ion. 
Finally, a summary of the funda- 


mental rules for safeguarding cryptograms was prcscn(,cd. 
e. With the for going as a background, a r view of which is recom- 


mended, the student, is in a position now to t,ak up t,h s(,udy of more 
advanced cryptographic methods. 
Spe ·ial empl1asis is to be laid 
only upon such systems as are pra ticablo for milit,ary usc. It is 
necessary to add, however, that crypt,ography is by no means a static 
art or science and that viewpoints are always und rgoing change; 
what is regarded as wholly impracticable t,oclay may, t,hrougb some 
unforeseen improvement in technique, become Iea iblo tomorrow, 
and it is lmwisc to condemn a sys(,om too hastily. For xampl , before 


~he World War, and indeed for tho first (,wo years of that conOict, 
the use of codebooks in the theater of opcrat,ions was ,. o-ardcd ns 


;to~y imp.racticable. 1 Colonel Hitt in his Manual for the Solution of 


_:!~tary o~phers' published in ] 916' says: 


t/ 


1 See, i~ this connccLion, Friedman, William F., American Anny Field Codes in 


S~r ~mencan: E~peditionary Forces Dnrino the fi'i1·st W01·ld War, Signal Security 


VJcc Pubhcatwn, OCSigO, War Depa.rLmenL, Washington, 1942. 
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• 
The necessity for exact expression of ideas practically excludes the use of codes 


for military work, although it is possible that a special tactical code might be 
useful for preparation of tactical order ·. 


Also, in an official British Army Manual of Cryptography prepared 
in 1914 is found tho following statement: 


Codes will firsL be considered, but as they do not fulfill the conditions required 
of a means of secret communication in the field, they need not be lealt with here 
at length. 


In tho 1935 edition of this text the foregoing quotations were im- 
mediately succeeded by tho following comment: 
It need only be pointed out in this connection that today code methods pre- 
dominate in the secret communication systems of the military, naval, and dip- 
lomatic serv ices of practically all the large nations of the world. 
Nevertheless, 


it is likely that within the next decade or two the pendulum may once more 
swing over to the other position and cipher methods may again como to tho fore, 
especially if mechanical and electrical cipher machines are perfected so that their 
operation becomes practicable for general use. It is for this reason, if for no other, 
that the cryptographer who desires to keep abreast of progress must devote con- 
siderable attention to the more compl icated cipher methods of the past and present 
time, for with the introduction of mechanical and electrical dev ices the complexi- 
ties and difficulties of these hand-operated methods may be eliminated. 
In. preparing this revision (1943) the author finds it nocessa.ry to say 
that the forecast he made in 1935 in regard to the rebirth of cipher 
methods has been fully jusLifiod by the present trend, which is in a 
direction away from code and towa.rd cipher methods, because of 
imp01'tant advances made in the field of mechanical and cl ctrical 
cryptographic devices a.nd mechanisms. 


f . It may be add d, too, that modern electrical communication 


methods and instrumcntali tics are finding an increasing need for 
applications of cryptographic theory and pmcticc to thciT efficacious 
opcmLion. For example, in very recent years there bas developed a 
distinct need for sccme methods and means for distorting voice com- 
munica.tions by telephone or radiophone, and for clisLorting facsimile 
transmissions by wire or radiotelegraphy. Teleprinter services per- 
mitting direct cryptographic intercommunication by machines oper- 
ated from a typowl'iLcr keyboard make it desirable to have means 
whereby, although the kcyboa.rd is operated to correspond to pla.in- 
text charu. tors, the la.ttcr a.re instantaneously and automatically 
enciphered in transmission and the received signals a.rc instantane- 
ously a.nd a.utomatically deciphered upon reception at the distant end. 
Thus the printing mccha.n.ism at the receiving sta.tion records the 
original plain.-text cha.ractcrs set up on Lhc keyboard at the sending 
station but interception of the signals passing over the line or by 
radio would yield only cipher text. 


g. It is difficult to foresee the specific cryptogra.phic methods 


which might some day be useful in connecLion with developments o{ 
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structed. For this pmpose cross-section paper will be found useful. 
The analysis of such a cryptogram is somewhat complicated by the 
presence of columns having varying numbers of letters; it may be 
further complicated by following complex routes in inscription. It is 


N 0 C A N 
F 0 
R 
S S U E 


FIGURE 1 


also possible to follow a numerical key in the inscription of the plain 
text in horizontal lines; tbis additional procedure would ftll'ther 
complicate and delay solution. 


5. Triangular designs.-a. The simplest way of drawing up a 


triangle for cryptographing is to take cross-section paper, draw 11. 
square the side of wbich is equal 
to the length agreed upon as ex- 
pressed in the number of cells, and 
then draw a diagonal cutting the 
large square into two equal tri- 
angles. This is shown in Figure 


~~ where the length agreed upon 
Is nine, i. e., nine cells per side. 
. The letters of the plain text are 
Inscribed in accordance with any 
prearranged route, the one illus- 
trated in Figure 3 being a simple 
method wherein the letters are 
inscribed in horizontal Jines in the 
normal manner. When so in- 


" 
I'\ 


~ 


9 


'\ 


I'\ 


_'\ 


scribed, the letters in the dia- 
I<' lounE 2· 


r'\. 
~ 
I" 


gram will form 2n- I columns where n is the number of cells forming 
one of tho sides of the square from which the triangle has been 
constructed. The total number of letters that can be inscribed within 
tibe tria~gle is the sum of ~+(n-I)+(n-2)+(n-3)+ .... . +I. 
For a triangle based upon a srde of 9 cells, the sum is 9+8+7+G+ 
5+4+3+2+1 =45. Tho letters may then be transcribed to form the 
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cryptogram by following another route, or by following a derived 
numerical key applied to the base of the triangle. A simple method of 
deriving a key of 2n -1 elements from a key of n elements or letters 
is exemplified herewith. Let the key be DIAGONALS, a word of 
nine letters. Extend this key to 2n -1 places by repetition, and 
then assign numerical values as usual: 


n = 9; 
2n-1 = 17 


1-2-3-4--5--6-7--B--9-10-11-12-13-14-15-16-17 


Keyword: 
D I A G 0 N A L S D I A G 0 N A L 
Numerical key: 5-9-1-7-15-13-2-11-17--6-10--3--8-16-14--4-12 
This numerical key is the one that has been employed in enciphering 
the message in Figure 3. 


RICRC OCSGE DOONI UAOOE 
SEYID RTISS DTSNR AUNTN 
PERTR 


FIGURE 3. 
b. By a slight change in procedure it is possible to encipher a mes- 
sage and produce a text which, for the sake of accuracy in special 
cases, is double the original length, but which is self-checking. Sup- 
pose that instead of applying a single numerical key to the base of the 
triangle, a double-length key is applied to the legs, as shown in 
Figure 4. Here the key is TRIANGLES, extended to double length 
by simple repetition, as follows: 


1--2-3-4--5-6-7-8--9-10-11-12-13-14-15-16-17-18 
Keyword: 
T R I A N G L E .S 
T R I 
A N G L E 
S 


Numerical key: 17-13-7-1-11-5-9-3-15-18-14--8-2-12--6-10--4-16 
This key is applied to the legs of the triangle beginning at the lower 
left-hand corner. The transcription then follows key-number order, 
which results in doubling the length of the message but the repeated 
letters are scattered throughout the whole message. In decrypto- 
graphing such a message the clerk merely omits the second occurrence 
of a letter if it agrees (in identity) with its first appearance in the text. 


c. Many variations in inscription and transcription can be em- 


ployed in the case of triangles as well as trapezoids. Some of the 
variations in the case of triangles are shown in Figure 5. 
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6. Diagonal methods.-a. A method involving diagonal trans- 


position which is reported to have been employed by the :Frell.ch 


..._,f:J 
Jq 
'b 
p 
Jf 


R 
0 


UUSOC YNTSO REOYS ONRER 
DRITI DTOGD RANEO RICSN 
CTRNI GENNE ATCSR OSIIR 
SIOET RTUAI POECO TNESS 
DPRCD AURSD 


FIGURE •1. 


Army in the World War is now to be described. A numerical key is 
derived from a fairly long word or phrase, and a rectangle is con- 
structed, as in Figure 6. The text is inscribed in this rectangle in 


Jq 
0 


(b) In diagonals from right leg, in key-number order: 


RIEDR OUAYN etc. 


(c) In rows from left leg, in key-number order: 


CTGEO YTCEU etc. 


(d) From columns in key-number order: 


CNROI TUGRU eto. 


FIGURE 6. 


normal fashion, nulls being employed, if necessary, to complete the 
last line of the rectangle. 


b. The correspondents agree beforehand upon several diagonals 


which run from left to right, and from right to left and which inter- 
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sect, thus cutting up the design quite thoroughly. In Figure 6 let 
these selected diagonals be those indicated by the numbers from 1 to 
6, inclusive, the odd ones indicating diagonals running from left to 
right. In the transcription, the letters along the indicated diagonals 
are frrst set down in groups of five, proceeding in key-number order. 
Correspondents must also agree beforehand as to whether a letter 
which lies at the intersection of two diagonals will be taken both times 
it is encountered or taken only once and, if so, whether on its first or · 
second appearance. After all these letters have been written down, 
one then proceeds with the remaining letters in the usual columnar 
manner, omitting the letters which have already been taken, or, 
again, if specially agreed upon, repeating them every time they are 
encountered. If the latter is done, the inclusion of such letters not 
only serves as a check upon accuracy but also materially increases the 
difficulties of solution, since in this case these letters act like nulls. 
The cryptographing process will become clear upon the study of the 
example in Figure 6. 


Message: ENEMY BATTERY LOCATED AT WOODS 1,000 YARDS 


SOUTHEAST OF MUMMASBURG HEAVY ARTILLERY 
STOP THEY ARE FIRING AT RATE OF THREE ROUNDS 
PER MINUTE FOR THE BATTERY X WILLS, MAJ. 


Keyphrase: MIDNIGHT RIDE OF PAUL REVERE. 
Enciphering diagram: 
MIDNIGHT RIDE OF PAUL REVERE 
15-11-2-16-12-9-10-22-19-13-3-4-17-8-18-1-23-14-20-5-24-6-21-7 


E N /~/ M y B A T T E 1~11:!'1 L 0 c /!/ ! E D I!/ ! '~' 0 0 
D /~/ 0 N E T H 0 U S ~ ~ D Y A R /Q/ S S 0 /~/T HE 


/~/ S T 0 F M U M M /~/S B /~/R G H E /~/ V/!/ 
A/~/ T I 
L L E R Y S T 0 
/~/ THE 
Y/~/ R E F I 
/~/I N G /~/T 


R A T E 0 F T /!i/ R E E R 0 U /!!/ D S 
/~/ E /~/ M I N IQ/ 


T E F 0 R T /H/ E B A T T E R Y /!/ /!{/ I L L /~1 M A J 


Cryptogram: 


ADARR SESAR NUANX YAAPH HAURA UWYPW 
RHEDO TETFS HETBE RTOIL TGIMO EITJO 
YRURB TMSFT AHUTT NSLAE YEFYO RESTE 
AESII EDLRT MNORE OLDYO ECAGR YTUMR 
BDSVE LOHTN ATOMO ETEFS TANM 


FIGURE 6. 


7. Interrupted keyword transposition.-cz. This method of 
transposition is a development of a more simple method wherein the 
transposition follows a numerical key. The latter must first be 
described. A keyword or keypbrase of fair length is selected and a 
numerical key derived from it. Let this key be the phrase UNI- 
FORMITY OF METHOD. 


Keyphrase: 
U N I F 0 
R M I T 
Y 0 F M E T H 0 D 
Numerical key: 17-10-6-3-ll-14-8-7-15-18-12-4-9-2-16-5-13-l 


\ 
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The plain text is then written out in horizontal lines corresponclm_~ 
to the length of the key; then transposition is effected with~n e~ch ro'l{J) 
according to the sequence of numbers applicable, as shown m F1gure (, 


Message· ADMINISTRATIVE ORDERS MUST BE COMPLETED AN.l) 


. READY TO ACCOMPANY FIELD ORDERS NOT LATEJt 


THAN 5:00 P.M. THIS DATE. 


Enciphering diagram: 
17-10-6-3-11-14-8-7-15-18-12-4-9-2-16-5-13-1 
A D 
R s 
N D 
F I 
R T 
E 


Cryptogram: 


M I N I S T R A T I V E 0 R 
M U s T B E c 0 M P L E T E 
R E A D y T 0 A c C 0 M p A 
E L D 0 R D E R s N 0 T L A 
H A N F I V E p M T H I s D 


EEIIR MTSVD NTDIR OAAAE UPEME BLSSM 
DTCTR OYMEC ARTYO DACND OPNAE TLNAE 
DROID STOEL FRTIA TDHVI HTNMA FESRP 
E 


F!OURE 7. 


D E 
D A 
N y 
T E 
A T 


b. In the foregoing case the cncipherment tak s place only by 


transposition within rows, but it is possible to complicat, tho method 
by transposing, in addition, the rows as a whole, employing the sarne 
key or only a portion of it, as much as is required. 
Thus, if the me • 


sago contained 18 rows of 18 letters each, then the transposition of 
rows could be effected according to key-number order, tho last row 
being taken fu·st (since the number 1 of tho numeri al key happens 
in this case to be at the end of the num ricn.L key), tho 14Lh row being 
taken second (since the number 2 of the numerical key is the 14th 
number), and so on. Where tho message does not ontain as many 
complete rows as there are numbers in the key, tho tran position 
takes place in key-number order nev rthelcss tho rows bein()' taken 
. h 
' 
b 
m t e numerical order of the numbers present. Using the smne key 
and message as in the foregoing case, the enciphormcnt would be as 
shown in Figure 8. 


Enciphering diagram: 


17-10-6-3-11-14-8-7-15-18-12-4-9-2-16-5-13-1 
17: A 
10: R 
6: N 
3: F 
11: R 
14: E 
Cryptogram: 


D M I N I S T R A T I V E 0 
s M U s T B E c 0 M P L E T 
D R E A D y T 0 A c C 0 M p 
I E L D 0 R D E R s N 0 T L 
T H A N F I V E p M T HI s 


ETLNA EDROI DSTOE LFRYM ECART YODAC 
NDOPN AAEUP EMEBL SSMDT CTROT IATDH 
VIHTN MAFES RPEEE IIRMT SVDNT DIROA 
A 


FIGUil& 8. 


R D E 
E D A 
A N y 
A T E 
D A T 
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c. From the preceding method it is but u step to the method of 
interrupted key transposition now to be described. Instead of writing 
the text in regular-length groups corresponding to the length of the 
key, it is written out in irregular groups the lengths of which vary 
according to some prearranged plan. For example, note the basis of 
the variable grouping in the following diagram, which uses the same 
message and key as under a above: 


Enciphering diagram: 


17-10--6--3-11-14--8--7-15-18-12--4--9--2-16--5-13--1 
A D 
M I N I 
s T R A T 
I v E 0 
R D 
E 
R s 
M u s T 
B 
E c 0 
M 
p 
L E T 
E D 
A 
N D 
R 
E A D 
y 
T 0 
A c c 0 
M p 
A N 
y 
F 
I 
E 
L D 0 
R 
D E R s 
N 0 
T L 
A T 
E 
R T 
H 
A N F 
I v E 
p 
M 
T H I s 
D A 
T 
E 


17-10--6--3-11-14--8--7-15-18-12--4--9--2-16--5-13--1 
A D 
M I N I 
s T R A T 
I v E 0 
R D 
E 
R s 
M u s T 
B 
E c 0 M 
p 
L E 
T 
E 
D A 
N D 
R E A D 
y 
T 0 
A c c 


0 
M 
p 
A N y 
F 
I E 
L D 
0 R D E 
R 
s N 
0 


T 
L 
A T E 
R 
T H 
A N 
F 
I v E 
p 
M T 
H I s D 
A T E (L c 
E 
P)*. 


Cryptogram (columnar transposition in key-number sequence): 


EEEDI UAEAT IIIPC OERRM MDRPO AFHTE 
TIHTS BYFTP AVLRP DSEDM NLNTN SANEV 
STMCD CDITD YREDR COEEO EARTN OSTAM 
AOALL 


FIGURE 9. 


d. This method may be combined with that shown under b above, 
thus further complicating the system. In decryptographing such a 
message it is best to use cross-section paper, block out the cells to be 
occupied by letters in the deciphering diagram, and indicate the key 
numbers applicable to each line. This will facilitate the process mate- 
rially and help eliminate errors. 
e. Another method of interrupted transposition is that which 


employs a rather long sequence of digits to control the interruption. 
In order to avoid the necessity of carrying around such a written 
sequence, it is possible to agree upon a number whose reciprocal when 
converted by actual division into its equivalent decimal number will 
give a long series of digits. For example, the reciprocal of 7, or 1/7, 
yields a repeating sequence of six digits: 142857142857 ... ; the 
reciprocal of 49, 1/49, yields a repeating sequence of 42 digits, etc. 


(•The four final letters LOEP are nulls, to complete the row.) 
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Zeros, when they appear, are omitted from the sequence. Suppose the 
number 19 is agreed upon, the reciprocal of which yields the sequeuce 
(0)52631578947368421. On cross-section paper mark oJI sets of Cells 
corresponding in number to the successive digits. Thus: 


5 
2 
6 
3 
1 
5 


I I I I I lXI I lXI I I I I I lXI I I lXI lXI I I I I _I etc. 


Let the message be ATTA K HAS BEEN POST PO ED. 


Encipherment: 


5 
2 
6 
3 
1 
5 


/A/H IE/ S/ 0 lXI TIAIXIT/S /NI T/N /DIXIAI Bl p lXI C/XIK IE/ 0 IP IE/ 


Cryptogram: 


AHESO TATSN TNDAB PCKEO PE 


f. To decryptograph such a messag , the cryptogram is written 


down in a series of cross-section cells, which are then blocked off in 
sets according to the numerical key: 


5 
2 
6 
3 
1 
5 


IAIHIE!sl o!XI TIAIXIT js !N IT IN! DIXIAI Bl PIX/ c!XIKI E I o I PIE I 


Taking the letters in consecutive order out of the successive sets, nnd 
crossing them off the series at the same time as they are being written 
down 'to construct the plain text, the message is found to begin with 
the following two words: 


5 
2 
6 
3 
1 
5 


'~'~ 
I E /SI 0 1 XI ti41X I'~I~INI TIN! DI XI~ IB/PIXI¢1XI*IE 0 !PIE I 


ATTACK HAS ... 


g. Preparatory to cryptograpbing, it is necessary to .find the length 


of the message to be enciphered and then to mark off as many cells as 
will be required for encipherment. Nulls are used to fill in cells that 
are not occupied after enciphering the whole message. The secrecy of 
the method depends, of course, upon the reciprocal selected, but there 
is no reason why any fraction that will yield a long s ri s of digits 
cannot be employed. If the selecLion of key numbers were restricted 
to reciprocals, the secrecy would be more limited in scope than is 
actually necessitated by the method itself. 


8. Permutation method.-a. An old method, known in litera- 


ture as the aerial telegraphy method, 1 forms the basis of this system. 


I So named because it was first devised and employed in messages iransmiLted 


by a system of semaphore signaling in practical usage in Europe bvforo tho 
electrical telegraph was invented. 
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A set of permutations of 3 4, ... 9 digits is agreed upon and 
these permutations are listed in a definite series. As an example, let 
these permutations be made of the digits 1 to 5, selecting only four 
of the possible 120. Suppose those selected are the following, set 
down in successive lines of the diagram in Figme lOa: 


Permutation 


2 3 1 5 4 
2 
3 
1 
5 
4 


3 2 5 1 4 
3 
2 
5 
1 
4 
- 


1 5 3 2 4 
1 
5 
3 
2 
4 


4 3 1 5 2 
4 
3 
1 
5 
2 


FIGURE lOa. 


The letters of the plain text, taken in sets of fives, are distributed 
within the sections of the diagram in accordance with the permuta- 
tions indicated above the sections and also at the left. Thus, the 
first five letters of the text, supposing them to be the initial letters of 
the word RECOMMENDATIONS, arc inserted in the following 
positions: 


Permutation 


2 3 1 5 411-E_2 __ , 
.. C __ 3 _ 
_ ,_R_1 __ ,M __ 5 __ ,,_0_4 _ _ 


The next five letters are inscribed in the second line of the diagrn,m 
in the sections indicated by the permutation above and at the left of 
the line. Thus: 


Permutation 


2 
3 
1 
5 
4 
2 3 1 5 4 
R 
M 
0 
E 
c 


3 2 5 1 4 
3 
2 
5 
1 
4 


N 
E 
A 
M 
D 


This process is continued for en,ch line and for as many lines as there 
are permutations indicated at the left. In the foregoing case, after 
twenty letters have been inserted, one inserts a second set of five 
letters again on the first line, placing the letters of this second set 
immediately to the right of those of the first set, respectively in key- 
number order. The succeeding lines are treated in similar fashion 


580405 • 
H - 
2 
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until the whole message has been en iphered. 
The following example 


will illustrate the process: 
Message: RECOMMENDATIONS FOR LOCATIONS OF NE1V 
BALLOON POSITIONS M ST BE SUBMITTEb 
BEFORE 12TH AIRDROME COMI ANY CHANGEs 
COMMAND POST TOMORROW. 


Enciphering diagram: 


Permutation 


2 
3 
1 
5 
4 
2 3 1 5 4 
CTIDMA 
RCOTRM 
MOIECD 
OITBEN 
EASE OM 


3 
2 
5 
1 
4 
3 2 5 1 4 
NOSRPS 
ESNOMO 
ANUTNT 
MNOFOP 
DFMEAT 


1 5 3 2 4 
1 
5 
3 
2 
4 


TESWYO 
SLSTNR 
OBBLHO 
IWTECM 
NAEFAR 
4 
3 
l 
5 
2 
4 3 l 5 2 
LNIRCB* ROMISC* FLUHGO 
OPTDOD* OOBAEW 


• The letters B, C, and D are nulls, to complete t.bo flguro. 


FIOURK lOb. 


The letters of the cipher text are taken from tho diagram according 
to any prearranged route, the most simple being to transcribe the 
lines of letters in groups of fives, thus: 


EASEO MCTID MARCO TRMMO IECDO ITBEN 
NOSRP SESNO MOANU TNTMN OFOPD FMEAT 
TESWY OSLST NROBB LHOIW TECMN AEFAR 
LNIRC BROME SCFLU HGOOP TDODO OBAEW 


b. The foregoing method when employed in its most simple form 
does not yield cryptograms of even a mod rate degree of secUl'ity; 
but if the method of inscription and tran cripLion is varied and made 
more complex, the degree of security may be increased quite notice- 
ably. It is possible to use longer permutations, based on sets of 6, 
7, 8, or 9 digits, but in every case the successive permutations must 
be prearranged as regards both their exact omposition and their 
order or arrangement in the diagram. 
9. Transposition method using special :figures.-a. The 
method now to be described is useful only in special cases whore the 
correspondence is restricted to brief communications between a very 
limited number of persons. It is necessary to agree in advance on 
certain particulars, as will be seen. Lot the message to be enciphered 
be the following: 


FOUR TRANSPORTS WILL BE COMPLETED BY END 
OF APRIL AND SIX MORE BY EN 
OF JULY. 
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Note the following figures and encipherment: 
!'1\t ;j 
F 
u TI.A. 
RuN 
~+ ·+· L+! +· 
R 
I 
E 
P 
+· + +0 ·+· +HS+ 
+Y+O+L+ 


Cryptogram: 
ORPSL OFUTA SOTWL BCMRN RIEPE BDPAI 
LTDYN OARLN SXEEF IDMRE FYOEY NOJLB 
DU 


l<'IOUltE ll. 


b. It will be noted that it is essential to agree in advance not only 
upon the nature of the figure but also upon the number of figures per 
line. 


c. The next series is a modification of the preceding. The same 
message will be employed, with a double-cross figure, five figures per 
line. 


0' U # 
L , :S 
E T 
D 0 
:-++-: : : :++-: :#: :-++-: 
~ W 
~ Y B 
~A 
'L*D 9J_j_:s o4u 
M-·-t+-S D*Y -tt-L 


X I 
·N E 
Y 


Cryptogram : 
OUPOL BETDO FRSRL ELENF NTITP CEDIA 
ARWSM OYBRP ANREF JLDOB OUMSD YLXIN 
EY 


FIGURE 12. 
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d. Still another series may be formed, as follows: 


F ±g 
R-f:a 
T 


L 


~$ 


s 


Cryptogram: 


p.=f=L E$L E 
l4 
l3 
y. 
T 
0 
E 
l3 


0 
D 


s 


I$F 
w 
0 


s 
:a 


T 


D$ 
0 
B 
ll 
E 


E 
B y~ 


y 
L 


FSLLN NOIPP LEEID AUWOM BYTRO RRSRO 
EBEPF TTCDA LOOMA DRFXN NEJID EBYUS 
YL 


FIGURE 13. 


I$N D 
R 
0 


p 
:r 


A 


e. A figure of different form than the preceding forms the basis of 
the next type. 


0 0 E D R ! 0 Y R W P N N L E 


F P B E U R C B T S M E A I L D S L T 


F N R 0 P S B J I X E L 


0 A 0 D A D E F R I Y U L M N Y 


Cryptogram: 


OOEDR TOYRW PNNLE FPBEU RCBTS 
MEAIL DSLTF NROPS BJIXE LOAOD 
ADEFR IYULM NY 


FIGURE 14. 


f. From the foregoing examples, it is obvious that many other 
figures may be used for effective transpositions of this kind, such as 
stars of varying numbers of points, polygons of various symmetrical 
shapes, etc. It is merely necessary to agree upon the figures, the 
number of figures per line, the starting points of tho inscription and 
transcription processes. 
g. The method lends itself readily to combination with simple 


monoalphabetic substitution, yielding cryptograms of a rather high 
degree of security. 
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SECTION III 


POLYPHASE TRANSPOSITION SYSTEMS 


Paragraph 
Polyphase transposition methods in generaL_____ _____ ______ ______ _____ 
10 


True and false polyphase transpositions_______ _______ __ ___ __ ____ _______ 
11 


True double transposition__________________________ _______ ___________ 
12 


10. Polyphase transposition methods in generaL-a. · In 


paragraph 32 of Special Text No. 165, brief mention was 1nade of 
transposition systems in which two or more processes of rearrange- 
ment are involved. It was stated that only a very limited number 
of such transposition methods are practicable for military use, but 
that the degree of security afforded by them is considerably greater 
than that afforded by certain much more complicated substitution 
methods. The methods referred to are those which involve two or 
more successive transpositions, and merely for purposes of brevity 
in reference they will here be called polyphase transposition methods 
to distinguish them from the single monophase methods thus far 
described. 
b. It is obvious that a polyphase transposition method may involve 
2, 3, ... successive transpositions of the letters of the plain 
text. To describe these methods in general terms, one may indicate 
that the letters resulting from a first transposition, designated as the 
T-1 transposition, form the basis of a second, or T-2 transposition. 
If the process is continued, there may be T-3, T-4 ..• trans- 
positions, and each may involve the use of a geometric figure or 
design. For convenience, the design involved in accomplishing the 
T- 1 transposition may be designated as the D- 1 design; that involved 
in accomplishing the T-2 transposition as the D-2 design, etc. 
However, it may as well be stated at this point, that so far as military 
cryptography is concerned, methods which involve more than D-2 
and T - 2 elements are entirely impractical and often those which 
involve no more than D-2 and T- 2 elements are also impracticable 
for such use. 
11. True and false polyphase transpositions.-a. It is pos- 


sible to perform two or more transpositions with the letters of a text 
and yet the final cryptogram will be no more difficult to solve than if 
only a single transposition had been effected. The equivalent of this in 
the case of substitutiqn ciphers is to encipher a monoalphabetic crypto- 
gram by means of a second single alphabet; the final result is still a 
monoalphabetic substitution cipher. Likewise, if a message has been 
enciphered by a simple form of route transposition and a second and 
similar or approximately similar form of simple route transposition 
is again applied to the text of the first transposition, the final text is 
still that of a monophase transposition cipher. Again, two transpo- 
sitions may be accomplished without really affecting a most thorough 


18 


scrambling of the letters composing the original text. Examples 
will serve to clarify the difference between false and true polyphase 
transposition. 
. . 
. 


b. Note the following simple columnar transpositiOn c1phor pre- 


pared according to the method described in paragraph 26 of Special 
TextNo.165: 


Message: DELIVER ALL AMMUNITION TO 4TH DIVISION 


DUMP 


Keyword: SCHEDULE=S C H E D U L E 
7-1-5-3-2-8-6-4 


Enciphering rectangle: 


71532864 


D E 
L 
I 
v 
E 
R 
A 
- 
- 
- 
- 
- 
- 
- 
- 


L 
L 
A 
M M u 
N 
I 
1- - 
- 
- 
- 
- 
- 
- 


T 
I 
0 
N 
T 
0 
F 
0 
- 
- 
- 
- 
- 
- 
- 
- 
u R 
T 
H 
D 
I 
v 
I 
- 
- 
- 
- 
- 
- 
- 
- 
s 
I 
0 
N 
D u 
M 
p 


Cryptogram (T-1): 


ELIRI VMTDD IMNHN AIOIP LAOTO RNFVM 
DLTUS EUOIU 


FIGURE 15. 


D- 1 


In producing the foregoing cryptogram only the columns were 


transposed. Suppose that by prearrangement, using the keyword 
BREAK (dei~ved numerical key= 2- 5- 3- 1- 4), tho horizontal lines 
of the foregomg enciphering rectangle were al o to be transposed. 
For example, let the horizontal lines of the rectangle D- 1 be trans- 


pos~d i~mediately before taking the letters out of tho columns of the 
design (m key-number order) to form tho cipher text. Thus: 


2 


5 


3 


4 


D 


- 


L 
- 


T 


- 
u 


-s 


E 
L 


- 
- 


L 
A 
- 
- 


I 
0 


- 
- 


R 
T 
- 
- 


I 
0 


I v E 
R 
- - 
- 
- 
M M u N . 
- 
- 
- - 


N 
T 
0 
F 
- 
- 
- 
- 
H D 
I v 
- 
- 
- - 


N 
D u M 


D- 1 


71 
532364 


A 
u 
R 
T 
H 
D 
I 
v 
I 
- 
- 
- 
- 
- 
- 
- 
- 
- 
I 
D E 
L 
I 
v 
E 
R 
A 
- 
- 
- 
- 
- 
- 
- 
- 
- 


0 
T 
I 
0 
N 
T 
0 
F 
0 
- 
- - 
- 
- 
- 
- 
- 
- 


I 
s 
I 
0 
N 
D u 
M p 
- 
- - 
- 
- 
- 
- 
- 
- 
p 
L 
L 
A 
M M u 
N 
I 


D-2 


Cryptogram (T-2): 


REIIL DVTDM HINNM IAOPI TLOOA VRFMN 
UDTSL IEOUU 


FIGURE 16. 
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c. The foregoing, however, is not a case of true polyphase or so- 


called double transposition. The same final result may be accom- 
plished in a way which will at first glance appear quite different but is 
in reality one that accomplishes the same two operations by combin- 
ing them in one operation. Let the message be inscribed as before, 
but this time with both numerical keys applied to the top and side 
of the rectangle. Then let another rectangle of the same dimensions, 
but with numbers in straight sequence instead of key-number sequence, 
be set alongside it. Thus: 


2 


5 


3 


1 


4 


7 
1 
5 
3 
2 
8 
6 
4 


D 
E 
L 
I 
v 
E 
R 
A 
1 
- 
- 
- 
- 
- 
- 
- 
- 


L 
L 
A 
M M u 
N 
I 
2 
- 
- 
- 
- 
- 
- 
- 
- 


T 
I 
0 
N 
T 
0 
F 
0 
3 
- 
- 
- 
- 
- 
- 
- 
- 
u 
R 
T 
H 
D 
I 
v 
I 
4 
- 
- 
- 
- 
- 
- 
- 
- 
s 
I 
0 
N 
D u 
M 
p 
5 


D- 1 


FIGURE 17. 


1 
2 
3 
4 
5 
6 
7 
8 


D-2 


Each letter in D- 1 is now transfened to that cell in D-2 which is 


indicated by the row and column indicators of the letter in D- 1. 
For example, the fiTst letter, D, o£ D- 1, has the indicators 2- 7 and 
it is placed in the 2- 7 cell in D- 2; the second letter of D- 1, which is 
E, is placed in the 2-1 cell of D-2, and so on. The final result is as 
follows: 


2 


5 


3 


1 


4 


7 
1 
5 
3 
2 
8 
6 
4 


D 
E 
L 
I 
v E 
R 
A 
- 
- 
- 
- 
- 
- 
- 
- 


L 
L 
A 
M M u 
N 
I 
- 
- 
- 
- 
- 
- 
- 
- 


T 
I 
0 
N 
T 
0 
F 
0 
- 
- 
- 
- 
- 
- 
- 
- 
u R 
T 
H 
D 
I 
v I 
- 
- 
- 
- 
- 
- 
- 
- 
s 
I 
0 
N 
D u 
M 
p 


D- 1 


1 


2 


3 


4 


5 


1 
2 
3 
4 
5 
6 
7 
8 


R 
D 
H 
I 
T v u 2__1 
1---- 


E v 
I 
A 
L 
R 
D 
E 


- 
- 
- 
- 
- 
- 
- 
- 


I 
T 
N 
0 
0 
F 
T 
0 


- 
- 
- 
- - 
- 
- 
- 


I 
D 
N 
p 
0 
M s u 


- 
- 
- 
- 
- 
- 
- 
- 


L 
M M 
I 
A 
N 
L 
u 


D- 2 


FraunE 18. 


It will be seen that if the columns of D- 2 are now read downwards 


in straight order from left to right the final cryptogram is identical 
with that obtained under b above: REIIL DVTDM, etc. 


d. The foregoing cipher, often called the Nihilist Cipher, is referred 
to in some o£ the older literatme as a double transposition cipher 
because it involves a transposition of both columns and rows; and 
indeed as described under b above it seems to involve a double process. 
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It is, however, not an example of true double transposition. When 
the mechanism of this cipher is compared with that now to be 
described, the great difference in the cryptographic security of the two 
methods will become apparent. 
12. True double transposition.-In the form of the false dou~le 


transposition described above it is only entire columns and entll'e 
rows that are transposed. 
Th~ disarrangement of the letters is after 
all not very thorough. In true double transposition this is no longer 
the case, for here the letters of columns and rows become so thor~ 
oughly rearranged that the £nal text presents a complete scrambling 
almost as though the letters of the message had been tossed into a hat 
and then drawn out at random. 


SECTION IV 


TRUE DOUBLE TRANSPOSITION 
Parogrnph 


True double transposition of the columnar type ______ ----------- - ----- - - 
13 
General remarks on true polyphase transposition __ ________ ____ __________ 
14 


13. True double transposition of the columnar type.-a. It is 
by what is apparently a simple modification of certain of the co~ 
lumnar methods already described that an exceedingly good true 
double transposition can be effected. Let a numerical key be derived 
from a keyword in the usual manner and let the message be written 
out under this key to form a rectangle in the usual manner for colum~ 
nar transposition. The length of the message itself determines the 


~xact dimensions of the rectangle thus formed, and whether or not it 
1s completely or incompletely filled. 
b: In its most effective form the double transposition is based upon 


~n ~ncompletely filled rectangle; that is, one in which one or more cells 


1n the last line rema.i.n unfilled. An example of the method now follows. 
Let the keyword be INTERNATIONAL; the message to be enciph~ 
ered, as follows: 


OUR ATTACK SLOWING UP IN FRONT OF HILL 1000 
YARDS SOUTHEAST OF GOLDENVILLE STOP RE- 
QUEST PROMPT REENFORCEMENT. 


Keyword: 
I N T E R N A T I 0 N A L 
Derived numerical key: 4-7-12-3-11-8-1-13-5-10-9-2-6 


The first, or D-1, rectangle is inscribed in the usual manner of simple 
numerical key columnar transposition. It is shown as D-1 in the 
accompanying figure. 
The letters of the T-1 transposition are then 
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4-7-12-3-11-8-1-13-5-10-9-2-6 


0 
u 
R 
A 
T 
T 
A c K s 
L 
0 w 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


I 
N G u 
p 
I 
N F 
R 
0 
N T 
0 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


F 
H 
I 
L 
L 
0 
N E 
T 
H 
0 
u s 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


A N D 
y 
A 
R 
D s s 
0 
u T 
H 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


E 
A s 
T 
0 
F 
G 
0 
L 
D 
E 
N v 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
-- 


I 
L 
L 
E s 
T 
0 ·P 
R 
E 
Q u 
E 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
s 
T 
p 
R 
0 
M 
p 
T 
R 
E 
E 
N F 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


0 
R c 
E 
M 
E 
N T 


D-1 


4-7-12-3-11-8-1-13- 5- 10 -9-2- 6 


A N N D G 0 P N 0 T U T N 


U N 


-------------- 
-------------- 


---~-~--------- 


D- 2 


FIGURE 19a. 


inscribed in the second, or D- 2, rectangle in the normal manner oj 
writing, that is, from left to right and from the top downwards. This 
is shown in D-2 of FigUTe 19a for the fu·st two columns of D-1 (in 
numerical key order) after transfer of their letters into D-2. The 
letters of the remaining columns of D- 1 are transferred in the same 
manner into D- 2, yielding the following rectangle: 
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4-7-12-3-ll-8-l-13-5-10 -9--2-6 


A N N D G 0 
p 
N 
0 
T 
u T N 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


u N A u L 
y 
T E R E 
0 
I 
F 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


A E I s 
0 
K R T s 
L R R w 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


0 s H v E F u N H N A L 
T 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


R T 
I 
0 
R F 
T 
M E L N 0 
u 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


E Q E s 
0 
H 
0 
D E E 
T 
p 
L 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
A 0 s 
0 
M R G I 
D s 
L 
p c 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
c F E s 
0 
p 
T 
T 


l<'IGUJIE l Ob. 


For the T- 2 text the letters are transcribed from tho D- 2 rectangle, 
reading down the columns .in key-number order, and grouping the 
letters in fives. The cryptogram is as follows: 


PTRUT OGTTI RLOPP DUSVO SOSAU AOREA 
CORSH EEDNF WTULC NNEST QOFOY KFFHR 
PUORA NTLTE LNLES GLOER OMONA IHIES 
ENETN MDIT 


c. In paragraph 28 of Special Text No. 165 a variation of the simple 


columnar key method of transposition was described. If the process 
therein indicated is repeated, double transposiLion is eifected. The 
following example will serve to illustrate the method, using the same 
message and key as were used in the paragraph to which reference 
was made: 


Message: REQUEST IMMEDIATE REE FORCEMENTS 


Keyword: 
P R 0 D U C T 


Derived numerical key: 4-5-3-2-7-1-6 


Encipherment: 


4-5-3-2-7-1-6 4-5-3-2-7-1-6 4-5-3-2-7-1-6 


Text: R E Q U E S T I M M E D I A T E R E E N F 
T-1: S I N E U E E E Q M R C R I 
T 0 T E M E R 


T-2: E R E E E R E F N M T A S E T S E I Q 0 T 


Cryptogram: 


4-5-3-2-7-1-6 4-5 
0 R C E M E N T S 
S T A F N E D E M 
M E I R D U C M N 


EREEE REFNM TASET SEIQO TMEIR 
DUCMN 
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d. In some respects this modified method is simpler for the novice to 
perform correctly than is that employing rectangles. Experience has 
shown that many ine::\"})ert cryptographic clerks fail to perform the two 
transpositions correctly when D-1 and D- 2 rectangles are employed 
in the work. 


14. General remarks on true polyphase transposition.-a. 
The cryptographic security of the true double transposition method 
deserves discussion. Careful study of a cryptogram enciphered by the 
double transposition method set forth in paragraph 13b and c will 
convince the student that an extremely thorough scrambling of the 
letters is indeed brought about by the method. Basically, its principle 
is the splitting up of the adjacent or successive letters constituting 
the plain text by two sets of "cuts", the second of which is in a direc- 
tion that is perpendicular to the first, with the individual "cuts" of 
both sets arranged in a variable and irregular order. It is well adapted 
for a regular and voluminous exchange of cryptograms between corre- 
spondents, because even if many messages in the same key are inter- 
cepted, so long as no two messages are ident.ical in length, they can only 
be cryptoanalyzed after considerable effort. 


b. Triple and quadruple transpositions of the same nature are 


possible but not practical for serious usage. Theoretically, a continu- 
ation or repetition of the transposition process will ultimately bring 
about a condition wherein the D- n rectangle is identical with the 
D- 1 rectangle; in other words, after a certain number of trans- 
positions the rectangle produced by a repetition of the crypto- 
graphing process results finally in dec1'Yptographing the message. 
Exactly how many repetitive transpositions intervene in such cases is 
extremely variable and depends upon factors lying outside the scope 
of this text. 
c. In the example of cryptographing given in paragraph 13b, the 
D- 1 and D-2 rectangles are identical in dimensions, and identical 
numerical keys are applied to effect the T - 1 and T - 2 transpositions. 
It is obvious, however, that is it not necessary to maintain these 
identities; D-1 and D-2 rectangles of di:fferent dimensions may 
readily be employed, and even if it is agreed to have the dimensions 
identical, the numerical keys for the two tra.nspositions may be di:ffer- 
ent. Furthermore, it is possible to add other variable elements. 
(1) 
The direction or manner of inscribing the letters in the D- 1 rectangle 
may be varied; (2) the direction ofreading off or taking the letters out 
of the D-1 rectangle in effecting the T-1 transposition, that is, in 
transferring them into the D-2 rectangle, may be varied; (3) the 
direction of inscribing these letters in the D- 2 rectangle may be 
varied; (4) the direction of reading off or taking the letters out of the 
D-2 rectangle in effecting the T -2 transposition may be varied. 
Finally, one or more nulls may be inscribed at the end of either the 
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D-1 or the D-2 rectangle (but not both) in order that the totl\} 
number of letters involved in the two transpositions be different, (\ 
factor which still further increases the degree of cryptographic 
security. 


d. The solution of cryptograms enciphered upon the double trana. 


position principle is often made possible by the presence of certa~ 
plain-text combinations, such as QU and CH (in German). For thia 
reason, careful cryptographers substitute a single letter for sue}). 
combinations, as decided upon by preagreement. For example, il.l. 
one case the letter Q was invariably used as a substitute for th~;~ 
compound CH, with good effect. 


SECTION v 


GRILLES AND OTHER TYPES OF MATRICES 
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15. Types of cryptographic grilles.- Broadly speaking, crypto- 
graphic grilles 1 are sheets of paper, cardboard, or thin metal in which 
perforations have been made for the uncovering of spaces in which 
letters (or groups of letters, syllables, entire words) may be written 
on another sheet of paper upon which the grille is superimpos!)d. 
This latter sheet, usually made also of cross-section paper, will here- 


af~er be designated for pUI'poses of brevity in reference as the grille 
grid, or grid. Its external dimensions are the same as those of the 
g.rille. Grilles are of several types depending upon their construc- 
tion and manner of employment. They will be treated here under 


th~ titles of (1) simple grilles, (2) revolving grilles, (3) nonperforated 
grilles, and (4) "post card" grilles. 


16. Simple grilles.-a. These consist usually of a square in which 
holes or apertures have been cut in prearranged positions. When 
the grille is superimposed upon the grid, these apertures disclose cells 
on the grid, in which cells letters, groups of letters, syllables, or entire 
;ords. may be inscribed. 
An example is shown in Figure 20. The 
fiour Sides of the obverse surface of the grille are designated by the 


gmes 1, 2, 3, 4; the four sides of the reverse surface, by the figures 


1 
Also often called "stencils." The general term matrix (plural matrices) is 
very useful · 
f 
· 
t 
· 
· 
' 
m re errmg o a geometnc figure or dtagram used for transposition 


purposes. Other terms in common use are cage, frame, box, etc. 
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5, 6, 7, 8. 
These figures are employed to indicate the position of the 
grille upon the grid in encipherment. 


b. (1) In cryptographing a message the grille is placed upon the 
grid, in one of the eight possible positions: Obverse surface up, with 


FIGUillli 20. 


figure 1, 2, 3, or 4 at the top left; or reverse sUTface up, with figUTe 5, 
6, 7, or 8 at the top left. The letters of the plain text are then 
inscribed in the cells disclosed by the apertures, following any pre- 
arranged route. In FigUTe 21, the normal manner of writing, from 
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ft to right, and from the top downward , bas been f !lowed ifl the 


inscription, the me sag being ALL DE TROYER OUT IDE. 


FJOURE 21. 


(2) The transcription pro os 
now follow . The cipher to~t is 


written down, the letters being taken by following any proarrn.IJ!;ed 
route, which must be perpendicular to the rout of inscription, other· 
wise the letters will follow in plain-text order. In the following, the 
route is by columns from loft to right. 
Cryptogram: 
LRTAD TSSER YOIDS ELOEU 


(3) If the number of lett rs of th plain-text message exceeds the 


number of cells disclosed by one pla emcnt of the grille, the letters 
given by this placement aro written down (in cryptographic order), 
and then the grille is placed in the next po. ition on a frc h grid; the 
process is continued in tbis manner until the entire m sago has been 
cryptographed. The several sections of the ciph r letters resulting 
from the placements of the grille on succe sive grids m roly follow 
each other in the final cryptogrnm. In this mann r of employment 
it is only necessary for the conospondents to agree upon the initial 
position of the grille and its successive positions or placements. 
c. It is obvious that by the use of a simple grille the letters of a 


message to be cryptographed may be distributed within an enveloping 


mess~ge consisting mostly of "dummy" text, inserted for purposes of 
enabling the message to escape suppression in censor hip. For 
example, suppose the grille shown in Figlil'e 20 is employ din position 
1 and the message to be conveyed is ALL DESTROYERS OUT IDE. 
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The letters of tbis message are inscribed in their proper places on the 
grid, exactly as shown in Figure 21. 
An "open" or disguising text 


is now to be composed; the latter serving as an envelope or "cover" 
for the letters of the secret text, wbich remain in the positions in 
which they fall on the grid. The open or disguising text, in other 
words, is built around or superimpo ed on the secret text. Note how 
this is done in FiguTe 22, with an apparently innocent message 
reading: 


I HAVE WORKED VERY WELL ALL DAY, TRYING TO 


GET EVERYTHING STRAIGHTENED UP BEFORE GOING 
ON MY NEXT TRIP SOUTH, BUT INSIDE TEN DAYS ... 


1 (5) 
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d. The foregoing method naturally requires the transmission of 
considerably more text than is actually necessary for conveying the 
message intended. W1Jcre questions of censorship are not involved, 
the method is therefore impractical. A modification of the method 
suggests itself in the use of a transparent sheet of paper superimposed 
upon a square or other figure in which the individual cells are irregu- 
larly numbered and the inscription process follows the sequence of 
numbers. An example is shown in Figure 23, using the message 
ROCK CREEK BRIDGE WILL BE DESTROYED WHEN 
TAIL HAS CROSSED. 
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The transcription may now follow any prearranged route. The 


normal method o£ reading would produce the cryptogram beginning 
WCTEH OEERI, etc. It is obvious that the correspondents must 
possess designs with identically numbered cells.1 
17. Revolving grilles.- a. In this type o£ grille (see fig. 24a) 


the apertures are also formed by perforating a sheet of cross-section 
paper according to prearrangement, but these apertures are so dis· 
tributed that when the grille is tum d four timessuccessivelythrough 
angles of 90° and set in four g1·ille positions on the grid, all the cells on 
the grid are disclosed in turn. (The preparation of such grilles will 
be discussed in par. 21.) If letters are inserted in the cells so disclosed, 
then after a complete revolution of the grille every one of the cells of 
the gr.id will contain a letter and thus the grid will be completely 
filled. For this reason such a grille is also called a self-filling, or an 
automatic-completion grille. The secrecy of messages enciphered by 
its means is dependent upon the distribution or position of the aper- 
tUI'es, the sequence of grille positions on the grid (i. e., whether in the 
order 1, 2, 3, 4 clockwise ; or 1, 3, 4, 2 etc.), and tbe route followed in 
inscribing and transcribing the letters in tlle cells o£ the grid. For each 
position of the grille, one-fourth the total number of letters of the 
text is inscribed; hence it is convenient to refer to "sections" of the 
text, it being understood that each section consists of one-fourth the 
total number of letters. 
b. There are two possible procedures so far as the inscription-tran- 


scription sequence is concerned. (1) The letters of the plain text may 
be inscribed in the cells of the grid through the apertures disclosed by 
the grille and then, when the grid has been completely filled, the 
grille removed, and the letters transcribed from the grid according to a 
prearranged route; or, (2) the letters of the plain text may :lli'st be 
inscribed in the cells of the grid according to a prearranged route and 
then the grille applied to the completely-filled grid to give the sequence 


1 The system employed by the French Army in 1886 was of the nature here 
described. 
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of letters forming the cipher text of the transcription process. The 
first method will be described in c below; the second in e below. 
c. Taking the simplest manner of inscribing the letters, that is, 
from left to right and from the top downwards, the letters of the first; 
section of the text; are inscribed in the cells disclosed by the apertures, 
the grille being in the :first position. This is shown in Figure 24b. 
The grille is then given X turn clockwise, bringing Figme 2 to the top 
left. If the grille has been correctly prepared, none of the cells dis- 
closed in the second grille position on the grid will be occupied by a 
letter. The letters of the second section are then inscribed, this being 
shown in Figme 24c. In Figure 24d and e, the results of inscribing the 
third and fourth sections, respectively, are shown. The letters of the 
cryptogram are then taken out of the completed grid by following any 
prearranged route of transcription. The cryptogram below has been 
transcribed by following down the columns in succession from left 
to right. 
d. To decryptograph such a message, the cipher letters are inscribed 
columnwise in a grid 10 by 10 (i.e., one composed of 100 cells, 10 per 
side) and then the grille applied to the square in four consecutive 
positions corresponding to those used in cryptographing. The letters 
disclosed by each placement of the grille are written down as they 
appear, section after section. 
e. The second manner of employing a revolving grille is merely the 


reciprocal of the f1rst. The procedure followed in the first method to 
decryptograph a message is followed in the second method to crypto- 
graph a message; and the procedure followed in the first method to 
cryptograph is followed in the second method to decrjptograph. 


18. Grilles of other geometric forms.-Grilles are not limited to 
square-shaped :figures. They may be equilateral triangles, pentagons, 
hexagons, and so on. Any :figure which ca.n be pivoted upon a central 
point and which when revolved upon this pivot can be placed in a 
succession of homologous positions over a grid corresponding to the 
grille will serve equally well. A triangle affords three grille positions, 
a pentagon, :five, and so on. 


19. Polyphase transposition by grilles.-One grille may be 
employed to inscribe the letters of the message on the grid, and a 
second, and different, grille employed to transcribe them from the 
grid to form the fmal text of the cryptogram. This would constitute a 
real double transposition method of great complexity. 
Polyphase 
transposition by a series of grilles is of course possible. 


20. Increasing the security of revolving grilles.-a. The total 


number of letters which a grille will exactly encipher is termed its 
capacity. If the number of letters of a message is always equal to 
the total capacity of the grille, this information is of great aid in 
solution by the enemy. For example, a message of 64 letters indi- 
cates a grille 8 by 8 with 16 apertures; one of 144 letters, a grille 12 


580-IOfi• 
4~- il 
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by 12 with 36 apertmes, and so on. There are, however methods of 
employing a grille so that it will serve to encipher ~essao-es the 
lengths of which are greater or less than. the capa.city of the ;rille. 


b. 'Yhen tho to~n1 n_um~er of letters IS le~s than the capacity of 
the gnlle, no modificatiOn m method of use Is necessary. Encipher- 
mont of such a message comes to a close when the last plain-text 
letter has been inscribed. In decryptographing such a message, the 
recipient must strike out, on tho grid upon whi h he is to inscribe 
the cipher text, a number of cells corresponding to the difference 
between tho number of letters of tho text as received and the total 
capacity f the grille. The location of the cells to be thus eliminnted 
must be prearranged, and it is b st u un.lly to strike them oft' from 
tho :finul posiL.ions of the grid. 
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c. When the total number of letters i equal to or gr ater tho.n the 
capacity of the grille, a grid of greater capacity than that of the grill 
can be prepared, on which the grille may be positioned several time , 
thus forming a largo or composite grid composed by the jtL'<taposition 
of the several small grids. If thrre are a few cells in excess of tht 
actual number required, the e may be struck o:O' from the large grid 
at prearranged points, for exnmpl , from the last cohunn and row, 
as shown in Figure 25b. The grille is then placed in its first position 
in turn on each of the component grids, then in its second position, 
and so on. An example will serve to illustrate. A message of fifty- 
two letters is to be enciphered with tho grille shown in Figure 25a, 
the capacity of which is sixteen letters. The number of letters of the 
message being greater than three times sLxt on, the composite grid 
must be composed of four small grids containing a total of sixty-four 
cells. Therefore, twelve of these cells must be eliminated. The e 
are shown in Figure 25b, together with the number indicating the 
positions occupied by the letters of the text. 
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21. Construction of revolving grilles.-a. There a.re several 


ways of preparing revolving grilles, of which the one described below 
is the most simple. 
All methods make use of cross-section paper. 


b. Suppose a revolving grille with a capacity of 100 letters is to be 


constructed. The cells of a sheet of cross-section paper 10 by 10 are 
numbered consecutively in bands from the outside to the center, in 
the manner shown in FiguTe 26a. It will be noted that in each band, 
if n is the number of cells forming one side of the band, the highest 
number assigned to the cells in each band is n-1. 


c. It will be noted that in each band there is a quadruplication of 


each digit; the :figure 1 appears four times, the :figure 2 appears four 
times, and so on. From each receding band there is to be cut out 
(n-1) cells: from the outermost band, therefore, nine cells are to be 
cut out; from the next band, seven; from the next, :five; from the 
next, three; and from the last, one cell. In determining specifically 
what cells are to be cut out in each band, the only rules to be observed 
are these: (1) One and only one cell bearing the :figure 1 is to be cut 
out, one and only one cell bearing the :figure 2 is to be cut out, and 
so on; (2) as random a selection as possible is to be mado among the 
cells available for selection for perforation. In Figure 26b is shown 
a sample grille prepared in this way. 


d. If the side of the grille is composed of an odd number of cells, 


the innermost band will consist of but one cell. In such case this 
central cell must not be perforated. 
e. It is obvious that millions of differently perforated grilles may 
be constructed. Grilles of :fixed external dimensions mn.y be desig- 
nated by indicators, as was done by the German Army in 1915 when 
this system was employed. For example, the FRITZ grille might 
indicate a 10 by 10 grille, serving to encipher messages of about ~00 
letters; the ALBERT grille mio-ht indicate a 12 by 12 grille, servmg 
to encipher messages of about ~44 letters, and so on. Thus, with a 
set of grilles of various dimensions, all constructed by a central 
headquarters and distributed to lower units, systematic use of grilles 
for messages of varying lengths can be afforded. 


f. A system for designn.ting the positions of the perforated cells of 


a grille mn.y be estn.blished between correspondents, so that the 
necessity for physical transmission of grilles for intercommunication 
is eliminated. An example of a possible system is that which is based 
upon the coordinate method of indicating the perforations. The 
columns from left to right and the rows from bottom to top are 
designated by the letters A, B, C, . . . Thus, the grille shown in 
Figure 26b would have the following formula: 
ADG; BBEH; CDJ; DEG; EACH; FFI; GE; HBDHJ; IDG; 


JABFI. 
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g. Given the formula, the eight corners of the grille cn,n be labeled 
in val'ious ways by pr an·ang ment; but tbe simplest method is 
that sho,~n in connc~tio~1 wiLh 11'igure 26b. Then the initial position 
of tho gnllo can bo mchcnLed by th numb l' which appears at the 
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FIGURE 26. 


upper left-hand corner when the grille is placed on the grid, ready fo 
use. Thus, position 1 indicates that the grille is in position with th 
figure 1 at the upper left-hand corner; position 3, with the figure 
at the upper left-hand corner, etc. 
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h. The direction of revolving the grille can be clockwise or counter- 


clockwise, so that correspondents must make arrangements before- 
hand as to which direction is to be followed. 


i. Revolving grilles can be constructed so that they have two 


operating faces, an obverse and a reverse face. They may be termed 
:evolving-reversible grilles. The principles of their construction merely 
lllvolve a modification of those described in connection with ordinary 
revolving grilles. A revolving-reversible grille will have eight possible 
placement indicators; usually positions 1 and 5, 2 and 6, etc., cor- 
respond in this obverse-reverse relationship, as shown in FigUl'e 20. 


j. The principles of construction described above apply also to 


grilles of other shapes, such as triangles, pentagons, etc. 


22. Nonperforated grilles.-a. All the effects of a grille with 


actual perforations may be obtained by the modified use of a nonper- 
forated grille. Let the cells that would normally be cut out in a grille 
be indicated merely by crosses thereon, and then on a sheet of cross- 
section paper let the distribution of letters resulting from each place- 
lnent of the grille on a grid be indicated by inserting crosses in the 
appropriate cells, as shown in Figure 27. 


Grille 
Grille Position 


FIGU!tll 270 . 
FtGUltE 27b. 


b. Note should be made of the fact that in Figure 27b the distribu- 
tion of crosses shown in the third row of cells is the reverse of that 
shown in the first· the distribution shown in the fourth row is the 
:re'V'erse of that sh~wn in the second. This rule is applicable to all 
re'V'olving grilles and is of importance in solution. 


c. If the letters of the text arc now inscribed (normal manner of 


Wl'iting) in the cells not eliminated by crosses, and tho letters trans- 
scribed from columns to :form the cryptogram, the results are the same 
as though a perforated grille had been employed. Thus: 


E W C R A E 0 L D A R D D A T I 


Cryptogram: 


EWCRA EOLDA RDDAT Y 


FIG Ul\E 27c. 
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d. It is obvious that a numerical key may be applied to effect a 


columnar transposition in the foregoing method, giving additional 
security. 


e. The method is applicable to grilles of other shapes, such as tri· 


angles, pentagons, hexagons, octagons, etc. 


j. In Figure 27c it is noted that there are many cells that might be 


occupied by letters but are not. It is obvious that these may be filled 
with nulls so thn.t the grid is completely filled with letters. Long 
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messages may be enciphered by the superposition of several diagrams 
of the same dimensions as Figure 27 c. 


23. Rectangular or "post card" grilles.-c~. The gril1o shown in 
Figure 28 differs from tho ordini.U'Y revolving grille in that (1) the 
apertures are rectangular in shape, and are greater in width, thu 
permiLtiJ1g o£ inscribing several letters u1 the cells disclosed on th 
grid by each perforation of the grille; and (2) the grille itself admits 
of but two positions with its obverse side up and two with its revers 
side up. In Figure 28 the apertures nrc numbered in succession from 
top to bottom in four series, each applying to one position of the 
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grille; the numbers in parentheses apply to the apertures when the 
grille is reversed; the numbers at the corners apply to the four posi- 
tions in which the grille may be placed upon the grid. 


b. One of the ways in which such a grille may be used is to write 
the first letter of the text at the extreme left of the cell disclosed by 
aperture 1, the second letter, at the extreme left of the cell disclosed 
by aperture 2, and so on. The grille is retained in the same position 
and the 17th letter is written immediately to the Tight of the 1st, 
the 18th immediately to the right of the 2d, and so on. 
Depending 
upon the width of the aperture, and thus of the cells disclosed on the 
grid, 2, 3, 4 ... letters may be inserted in these cells. When all the 
cells have been filled, the grille may then be placed in the second 
position, then the third, and finally, the fourth. 
c. Another way in which the grille ma,y be used is to change the 


position of the grille after the 16th letter has been inserted, then 
after the 32d, 48th and 64th; the 65th letter is then inserted to the 
right of the 1st, the 81st, to the right of the 17th, and so on until the 
grid is completed. 


d. Whole words may, of course, be inserted in the cells disclosed by 
the apertures, instead of individual letters, but the security of the 
latter metlwd is much lower than that of the former. 


e. The text of the grid may be transcribed (to form the cryptogram) 


by following any prearranged route. 


j. The successive positions of a post card grille may be prearranged. 


The order I, 2, 3, 4 is but one of 24 di:ffer.ent sequences in which it may 
be superimposed upon the grid. 


g. A modification of the principles set forth in paragraph 21, dealing 


with the construction of revolving grilles, is applied in the construc- 
tion of rectangular or "post card" grilles. N o+e the manner in which 
the cells in Figure 29a are assigned numbers; homologous cells in each 
band receive the same number. In Figure 29a there are three bands, 
numbered from 1 to 8, 9 to 16, and 17 to 24. 
Then in each band one 


and only one cell of the same numbered set of four cells is cut out. 
For example, if cell la is selected for perforation from band 1 (as 
indicated by the check mark in that cell), then a cross is written in 
the other three homologous cells, 1b, c, and d, to indicate that they 
are not available for selection for perforation. Then a cell bearing 
the number 2 in band 1 is selected, for example, 2c, and at once 2a, 
b, and d are crossed off as being in ligible for selection, and so on. 
In Figure 29c is shown a grille as finally prepared, the nonshaded cells 
representing apertures. 
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h. The grille, Figure 29c, is a 


11 six- olumn" on , that i , the c ll f 


I . 
b . 
1 
·u 
. h 
e s orm 
six columns. 
t IS o Vlous t1at gn es w1t 
nny even numb 
f 


columns of cells aro pos.sible. 
Tho nu~b~r of apertures in each ~::d 


should be equal and tb1s numb r multiplied by the ntu:nbor of b d 
. 
f l 
ill 
nn s 
and then by 4 should equal the capae1ty o t 10 gr o. In the case of 


la 
On 
17a l7l'. 
9l'. 
lCl 


~ IH)a 
'1811 
1!1" lOt'. _2c_ 


3n lllA 
19a 19· 
11 
1c 


4a Inn 
20a 20n 12n "-c 
5a l3a 
2la 2lc l;e Sc 


6a ll.a 
22a 
~0 l~c 6c 


7a 15a 
23a 23c 15c 7c 


Sa 16a 
24a Uo 16c Be 


Sd 16d 
24d 24b 16b Sb 


7d 15d 
23d 23b 15b 7b 


~ 1.4d 
22d 22b ll.b bb 
5d IBd 
2ld _2lll. ~3b 5b 


4d 112d 
20d 20b 12b 4b 


~3d lld 
19d l9b lJ.b 3b 
2d 
Od 
18d 
l8b 
LOb. _21> 


ld 
9d 
17d 17b 
9b lb 


a 


....- 
2S 
>< 
....- 


12< 
!>< 
>< 
..2:5. 


b 
c 


l •'IG UJ\E 29. 


the one shown in Figure 29c the capacity is 8 by 3 by 4 or 96 cells 
this is the same as is obtained merely by multiplying the height C 
cells) by the number of column, 16X6= 96. If four letters ar 
inscribed in each rectangle, the capacity of the grille in terms o 
letters is 384. The grid in this case would, aftel' compl tion, presen 
24 columns of letters, to which a numerical k y for a second trans 
position can be applied in transcription to produce the final text o 
the cryptogram. 
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24. Indefinite or continuous grilles.-a. In his Manual of 


Cryptography, Sacco illustrates a type of grille which he has devised 
and which has clements of practical importance. An example of 
such a grille is shown in Figure 29a. 
This grille contains 20 


columns of cells, and each column contains 5 apertures distributed 
at random in the column. There are therefore 100 apertures in all, 
and this is the ma:}:..'Jmum number of letters which may be enciphered 
in one position of the grille. 
The plain text is inscribed vertically, 
from left to right, using only as many columns as may be necessary 
to inscribe the complete message. 
A 25-letter message would require 
but 5 columns. To form the cryptogram the letters are transcribed 
horizontally from the rows, taking the letters from left to right as they 
appear in the apertures. If the total number of letters is not a 
multiple of 5, sufficient nulls are added to make it so. In decrypto- 
graphing, the total number of letters is divided by 5, this giving the 
number of columns employed. 
The cipher text is inscribed from left 


to right and top downwards in the apertures in the rows of the indi- 
cated number of columns and the plain text then reappears in the 
apertures in the columns, reading downward and from left to right. 
Cit is, of coUl·se, not essential that nulls be added in the encipberment 
to make the length of the cryptogram an exact multiple of 5, for the 
rnatter can readily be handled even if this is not done. In decipher- 
ment the total number of letters divided by 5 will give the number of 
complete columns ; the remainder left over from the division will give 
the number of cells occupied by letters in the last column on the right.) 


FIGURE 29a. 


b. Such a grille can assume 4 positions, two obverse and two reverse. 


-AlTangements must be made in advrmce as to the sequence in which 
the various positions will be employed. That is why the grille shown 
in. Figure 29a has the posi tion-designa.ting letter "A" in the upper 
left-hand comer and the letter "B" (upside down) in the lower right- 
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hand corner. 
On tb obverse side of lbe grmc would be the position· 


designaLing leLtcrs 


11 "and " D." 
. 


c. In Figur 29b is hown l10w n, me sng is en iphered. 


Message: 


AM RECEIVING HEAVY MACHINE GUN FIRE FROM HILL SIX TWO ZERO. 


F IGURE 29b. 


Cryptogram: 
EGIIX FNNEA YTHFL RIRMO IOLWE MERVA ERMAH EGSOA ICUEC NVHIZ 


(The letters E and A in the J Oth column arc nullA. 
Columns 11 to 20 are not 
used at all, the irregular right-ha11d edge of the grille merely indicating that this 
portion of the grille remains vacant.) 
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SECTION VI 


MISCELLANEOUS TRANSPOSITION SYSTEMS 


Paragraph 


Complex route transposition __ _________ ________ ___ ________ ______ ______ 
25 
Transposition of groups of letters, syllables, and words_ __ ______ ______ __ __ 26 
Disguised transposition methods_ _____ __________ __ ___ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 27 
Cipher machines for effecting transposition ___ ______ ______ _____ ----_---- 
28 


25. Complex route transposition.-a. In Figure 30 a route for 


inscribing letters within a rectangle is indicated by a sequence of 
numbers. The initial point may be at any of the four corners of the 
rectangle, or it may be at any other point, as prearranged. The 
letters may be inscribed to form the rectangle by following the route 
indicated and then transcribed from the rectangle to form the crypto- 
gram by following another route; or the letters may be inscribed 
according to one route and transcribed accordingly to the numerical 
route indicated. 


--;;; . 
. 
•_:,._ 


If C1 
.... 
... 
' " 
2 . 


' / 
• 


~ 
I 


-+ 
- 


jt 
_A_ 


i ~ - + 
- 


FIOUllE 30. 
FIGURE 3L 


b. A variation of the foregoing is that illustrated in Figure 31, 
wherein the inscription follows the route shown by the arrows. The 
initial point of inscription is indicated by the figure 1, and the final 
point, by the figure 2. 
c. In the foregoing case, the route is a succession of the moves 
made by the Icing in the game of chess; it forms the so-called "Icing's 
tour", in which the playing piece makes a complete or reentrant 
journey covering all cells of the chessboard, each cell being traversed 
only once. A route composed of a succession of moves made by the 
knight, or the so-called "knight's tour", is also possible, but in order 
to be practical a grid with the cells numbered in succession would have 
to be prepared for the correspondents, since millions of different re- 
entrant knight's tours can be constructed 1 on a chessboard of the 
usual 64 cells. 
26. Transposition of groups ofletters, syllables, and words.- 


There is nothing in the previously described methods which precludes 
the possibility of their application to pairs of letters, sets of three or 


1 See Ball, W. W. R., Mathematical Recreations and Essays, London, 1928. 
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more letters, or even syllables and whole words 
Nor 
f 
. 
l . 
li . d 
. 
. h 1 . t 
· 
, o course, 1s 
t 1err use IDite to operatwns w1t pam ext; they lnay b 
li d 
f 
. 
b . 
. 
. 
e app e 
as secondary steps a ter a su st1tut1ve process has been completed 
(see Sec. X). 


27. Disgu~sed transposition method~.-a. The system often 


encountered m r?n:ances an.d myst~ry stones, .wherein .the message 
to be conveyed IS msertod m a sonos of nonsignificant words con- 


struc~ed with the ,furpo~~ of avoiding o~· eva~g suspicion, is n species 
of this form of 
open 
cryptogram mvolvmg transposition. The 


"open" or enveloping, apparently innocent. text may be designated 
as the external text; the secret or cryptogrn.pbic text may be designated 
as tho intemal text. A complica(;ed example of extornnl or open and 
internal or secret text is that shown in paragraph 16. 


b. Little need be said of the method based upon constructinO' exter- 


nal text the letters of which, at prearranged positions or interval , 
spell out the internal text. For example, it may be prearranged that 
every fourth letter of the external text forms tho series of letters for 
spelling out the internal text, so that only the 4th, 8th, 12th ... 
letters of the external text are significant. The same rule may apply 
to tho complete words of the external text, tho n, 2n, 3n, ... word 
form the internal text. The preparation of the external text in a 
suitable form to escape suspicion is not so easy as might be imagined, 
when efficient, experienced, and vigilant censorship is at work. Often 
tho paragraph or passage containing the secret text is sandwiched in 
between other paragraphs added to pad the letter as a whole with text 
suitable to form introductory and closing matter to help a.llay sus- 
picion as to the presence of secret, hidden text. 
c. A modification of the foregoing method is that in which the 1st, 
3d, 5th, ... words of a secret message are trn.nsmitted at one time 
or by one agency of communication, and the 2d, 4th, 6th, ... word 
of the message are transmitted at another time or by a.nother agency 
of communication. Numerous variations of this scheme will suggest 
themselves, but they are not to be considered seriously as practical 
methods of secret intercommunication. 


d. Two correspondents may agree upon a specific size of paper a.nd 


a special diagram drawn upon this sheet, the lines of which pas 
through the words or letters of the internal text as they appear in the ex- 
ternal text. For example, the legs of an equilateral triangle drawn upon 
the sheet of paper can serve for this purpose. This method is practi- 
cable only when messages can be physically conveyed by messenger, by 
the postal service, or by telephotographic means. Many variations 
of this basic scheme may perhaps be encountered in censorship work. 
28. Cipher machines for effecting transposition.- These may 
be dismissed with the brief statement that if any exist today they are 
practically unknown. A few words are devoted to the subject under 
paragraph 71 
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B. SUBS'l'ITUTION SYS'l'EMS 


SECTION VII 


POLYGRAPHIC SYSTEMS 


Paragraph 


Preliminary remarks___ _____ __ ______ ______ _________ ____ ____ ______ ___ _ 
29 


Monographic and polygraphic substitution ___ ______ ________ ___ ___ - ----- 
30 


Polygraphic substitution by means of tables--- ----- -------- -- - - --- ----- 
31 
29. Preliminary remarks.-a. It is assumed that the student has 


absorbed the information contained in Sections VII to XIII, inclusive, 
Special Text No. 165, Elementary Military Cryptography. The 
sections deal with the various types of cipher alphabets, simple monoal- 
phabetic substitution, monoalphabetic substitution with variants, the 
more simple varieties of polyalphabetic substitution, cipher disks, and 
cipher tables. The present study of substitution is a continuation of 
the former, a thorough understanding of which is a requisite to the ex- 
amination of the more complex types of substitution now to be set forth. 
b. Before entering upon the study referred to, it will be advisable 


to explain several terms which will be used. Substitution methods 
in general may be described as being monoliteral or polyliteral in char- 
acter. In the former there is a strict letter-for-letter replacement, or, 
to include numerical and symbol methods, there is a "one-to-one" 
corr-espondence between the length of the units of the plain text and 
those of the cipher text, no matter whether the substitution is mono- 
alphabetic or polyalphabetic in character. In polyliteral methods, 
however, this "one-to-one" correspondence no longer holds. A 
combination of two letters, or of two figures, or of a letter and a figure, 
may represent a single letter of the plain text; there is here a "two-.to- 
one" correspondence, two characters of the cipher text reprosentrng 
one of tho plain text. The methods described under Section X, Special 
Text No. 165, fall under the latter desio-nation; the cipher equivalents 
I:> 
• 
• 


there shown are, properly speaking, bipartite in character. Tnpart1te 
cipher equivalents are also encountered. Polyliteral .methods, there- 
fore, are said to employ polypaTtite alphabets, of which the bipartite 
type is by far the most common. Further on in this text, polyliteral 
methods of greater complexity than those illustrated in Section X, 
Special TextNo.165, will be discussed. Attentionnowwill be directed 
more particularly to a different type of substitution designated as 
monogTaphic and polygmphic substitution. 


30. Monographic and polygraphic substitution.-a. All the 
methods of substitution heretofore described are monographic in 
nature, that is, in the enciphering process the individual units sub- 
jected to treatment are single letters; there is a letter-for-letter sub- 
stitution, or, to include numerical and symbol methods, there is, as 
in the case of monoliteral substitution, a" one-to-one" correspondence 
between units of the plain text and those of the cipher text. In poly- 
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graphic substitution, however, combinations of letters of the plain 
text, considered as indivisible compounds, constitute the units for 
treatment in encipherment. If the units consist of pairs of plain-te~t 
letters, the encipherment is pair-for-pair, and is said to be digraphic 
in character; if the units consist of sets of tlu-oe letters, it is ttigraphic 
in character, and so on. There is still a "one-to-one" correspondence 
involved, but the units in these cases are composi to in character and 
the individual elements composing the units affect the cipher equiva. 
lents jointly, rather than sepnrately. Tho bn. ic important factor in 
true polygraphic substitution is that all the letters of th group partici- 
pate in the determination of the cipher equivalent of the group; the 
identity of each letter of tho plain-text group affects the composition 
of the whole cipher group. Thus, in a certain digraphic system ABP 
may be enciphered as XPc, and ACD, on the other hand, may be en- 
ciphered as NKc; a difference in the identity of but one of the letter 
of the plain-text pair here produces a difference in the identity of both 
letters of the cipher pair. 


b. For practical u ·age polygraphic substitution is limited to the 
handling of digraphs and trigraphs, although very occasionally groups 
of more than three letters may be employed for special purposes. 
c. The fundamental purpose of polygmphic substitution is the sup- 


pression or rather the elimination of the frequency characteristics of 
ordinary plain text. It is these frequency characteristics which lead, 
sooner or later, to the solution of practically all substitution ciphers. 
When the substitution involves only individual letters in a mono- 
alphabetic system, the cryptogram can bo solved very quickly; when 
it involves individual letters in a polyalphabct.ic system, the crypto- 
gram can usually be solved, but only after a much longer time and 
much more study, depending upon the complexity of tho method. 
The basic principle in the solution, however, is to reduce the poly- 
alphabetic text to the terms of monoalphabetic ciphers and then to 
solve the latter. In true polygraphlc substiiution on the other band, 
the solution does not rest upon the latter basis at all because it is not 
a question of breaking up a complex text into simpler elemenis; it 
rests, as a rule, upon tho possibility of analysis on the basis of the fre- 


q~ency of the polygraphic units concerned. lf the substitution is 
digraphic, then the units are pairs of letters and the normal fre- 
quencies of plain-text pairs become of flrst consideration· if the sub- 
stitution is trigraphic, the units are sets of three letters and tho normal 
frequencies of plain-text trigraphs are involved. In tho last two case 
the data that can be employed in the solution are meager, and a.re 
far f1:om definite or unvarying in their significance, and that is why 
solutwn of polygraphic substitution ciphers is often extremely difficult. 
d. Just as in typography, when certain combinn.tions of letters such 


as fi, fl, and ffi, are mounted on one and the same piece of type,' they 
are called logotypes or ligatures, so in cryptography, when combina- 
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tions of two or more letters are to be treated as a unit in a crypto- 
graphic process, they may also be called ligatures and can be conven- 
iently indicated as being so by placing a bar across the top of the 
combination. Thus, COv represents the digraph CO of the plain text. 
It will also be convenient to use the Greek letter 0 to represent a letter of 
the alphabet, without indicating its identity. Thus, instead of the cir- 
cumlocution" any letter of the plain text", the symbol Ov will be used; 
and for the expression "n.ny letter of the cipher text", the symbol Oc 
will be used. 
The symbol Mv then means "any plain-text digraph"; 
the symbol Me, "any cipher-text digmph." To refer specifically to the 
1st, 2d, 3d ... member of a ligature, the exponent 1, 2, 3 ... will 
be used. Thus, 02v of REMv is the letter E ; 03 


0 of XRZc is Z. 


31. Polygraphic substitution by means of tables.-a. The 
most simple method of eiiecting polygraphic substitution involves the 
use of tables similar to that shown in Table 1. This table merely 
presents equivalents for digmphs and is to be employed upon the 
coordinate system, 01v of 0102 
11 being sought in the column at the left or 
right, 02v in the row at the top or bottom. The cipher pair, 6162 
0, is then 
found at the intersection of the row and column thus indicated. For 
example, AFv=YGci FHv= AZc, etc. 


A 


B 
c 


D 


X 


TABLE 1 


(Showing only a partially filled table) 
Final Letter (02D) 


A B C D E F G H I J K 


FX CH XE yy ZA YG FB CD EF XJ zx 
- 
- 
- 
- - - - - - 
- 
- 


NY DC NB ZI XX DX 
- 
- 
- - - 
- 
- 
- 
- 
- - 


AH 
AB 
- 
- 
- 
- - 
- 
- 
- 
- - - 


BB 
YA 
AY 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 


AX 
AI 


- 
- - - - 
- 
- 
- 
- 
- -- 


AG 
NZ 
AZ 
-· - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
. . . . . 


• 
• 
• 
0 
• 
= 
BC Jy =t===== 


• 
• 
• 
0 
0 
• 


• 
• 
0 
• 
• 
• 


AC 
AJ 


Y DE 
AF 


Z AE 
BD 


A B C D E F G H I J K 


X y z 


EA DJ FH A 
- - - 


B 


- - - 


ND 
c 


- - - 
BF 
D 


- - - 


E 


- - - 
AA 
F 


- - - 
I}AIFEI N 


- - 
- 


BE 
X 


- 
- 
- 


AD 
y 


- 
- 
- 


AK 
z 


X Y Z 
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b. The foregoing table is reciprocnl in nature; that is, AF11=YQ 


and YG11=AFc· Thus, a single tables rves for enciphering as well a~ 
for deciphering. The word DEFEND would be enciphered as YA NZ 
CY, and then grouped in fives: YA ZC Y . . . . When a final single 
letter occurs, a null is added in order to make a pair of letters capable 
of being enciphered by the method. Reciprocity i , however, not an 
essential factor and for greater security nonreciprocal tables n.re more 
advisable. In such cases an enciphering tab] must have its comple- 
mentary deciphering table. 
c. Until the amotmt of text enciphered by means of such a table 
becomes great enough to disclose the ciphrr equivalents of the mo t 
frequently used digraphs, such as EN, ER, RE, TH, ON, etc., crypto- 
grams based upon the table are r lativcly secme against solution. 


d. A simple method for preventing the establishment of the fre- 


quencies characterizing these commonly used digraphs and thus elim- 
inating the principal basis for their identification is given in paragraph 
52 e. 


e. The factor th:1t contributes most to the relatively high degree 


of secmity of the digraphic method de crib din a and b above is th 
absence of symmetry in the table employed; for this table is con- 
structed by random assignment of values and shows no symmetr:'i 
whatsoever in its arrangement of contents. Hence, oven if 81 
11 in a 
:first case of 0102 
11=8102 
0 is identical with 01 


11 in a second case, 810t0 in th 
first case is wholly different from 0102• in tho s cond case. For example, 
Table 1 shows that A011=XEa and AD11=IT0 ; tho cipher resultant 
fail to give any hint that the plain-text pairs contain an identical letter. 


f. If, however, the latter is not the· case and the table exhibit 


symmetry in its arrangement of contents, solution is somewhat 
facilitated. 
Note the following Table 2, for example, in which two 


mixed sequences are employed to form the cipher equivalents. One 
mixed sequence is based upon tbe keyphmso WESTINGHOUSE 
AIR BRAKE; the other, upon tho keyphraso GENERAL ELEC- 
TRIC COMPANY. The word FIRE would bo enciphered as ICIQA. 


<., 
00 , 
.... 
0 
.:.:'1 


0 


::;: 


... 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 
L 


-" M 
<::> 


N 
0 
p 
Q 
R 
s 
T 
u 
v 
w 
X 
y 
z 


T ABLE 2 


(J2D 


A B C D E F G H I 
J 
K L M N 0 
P 
Q R S 
T U V W X Y Z 


WG EE SN TR IA NL GC HT OI UO AM RP BY KB CD DF FH JJ LK MQ PS QU VV XW YX ZZ 
EG SE TN IR NA GL HC OT UI AO RM BP KY CB DD FF JH LJ MK PQ QS VU XV YW ZX WZ 
SG TE IN NR GA HL OC UT AI RO BM KP CY DB FD JF LH MJ PK QQ VS XU YV ZW WX EZ 
TG IE NN GR HA OL UC AT RI BO KM CP DY FB JD LF MH PJ QK VQ XS YU ZV WW EX SZ 
IG NE GN HR OA UL AC RT BI KO CM DP FY JB LD MF PH QJ VK XQ YS ZU WV EW SX TZ 
NG GE HN OR UA AL RC BT KI CO DM FP JY LB MD PF QH VJ XK YQ ZS WU EV SW TX IZ 
GG HE ON UR AA RL BC KT CI DO FM JP LY MB PD QF VH XJ YK ZQ WS EU SV TW IX NZ 
HG OE UN AR RA BL KC CT DI FO JM LP MY PB QD VF XH YJ ZK WQ ES SU TV IW NX GZ 
OG UE AN RR BA KL CC DT FI JO LM MP PY QB VD XF YH ZJ WK EQ SS TU IV NW GX HZ 
UG AE RN BR KA CL DC FT JI LO MM PP QY VB XD YF ZH WJ EK SQ TS IU NV GW HX OZ 
AG RE BN KR CA DL FC JT LI MO PM QP VY XB YD ZF WH EJ SK TQ IS NU GV HW OX UZ 
RG BE KN CR DA FL JC LT MI PO QM VP XY YB ZD WF EH SJ TK IQ NS GU HV OW UX AZ 
BG KE CN DR FA JL LC MT PI QO VM XP YY ZB WD EF SH TJ IK NQ GS HU OV UW AX RZ 
KG CE DN FR JA LL MC PT QI VO XM YP ZY WB ED SF TH IJ NK GQ HS OU UV AW RX BZ 
CG DE FN JR LA ML PC QT VI XO YM ZP WY EB SD TF IH NJ GK HQ OS UU AV RW BX KZ 
DG FE JN LR MA PL QC VT XI YO ZM WP EY SB TD I F NH GJ HK OQ US AU RV BW KX CZ 
FG JE LN MR PA QL VC XT YI ZO WM EP SY TB ID NF GH HJ OK UQ AS RU BV KW CX DZ 
JG LE MN PR QA VL XC YT ZI WO EM SP TY IB ND GF HH OJ UK AQ RS BU KV CW DX FZ 
LG ME PN QR VA XL YC ZT WI EO SM TP IY NB GD HF OH UJ AK RQ BS KU CV DW FX JZ 
MG PE QN VR XA YL ZC WT EI SO TM IP NY GB HD OF UH AJ RK BQ KS CU DV FW JX LZ 
PG QE VN XR YA ZL WC ET SI TO IM NP GY HB OD UF AH RJ BK KQ CS DU FV JW LX MZ 
QG VE XN YR ZA WL EC ST TI IO NM GP HY OB UD AF RH BJ KK CQ DS FU JV LW MX PZ 
VG XE YN ZR WA EL SC TT II NO GM HP OY UB AD RF BH KJ CK DQ FS JU LV MW PX QZ 
XG YE ZN WR EA SL TC IT NI GO HM OP UY AB RD BF KH CJ DK FQ JS LU MV PW QX VZ 
YG ZE WN ER SA TL IC NT GI HO OM UP AY RB BD KF CH DJ FK JQ LS MU PV QW VX XZ 
ZG WE EN SR TA IL NC GT HI 00 UM AP RY BB KD CF DH FJ JK LQ MS PU QV VW XX YZ 


H"'- 
c;-, 
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g. A cmsory exammation of Table 2 hows that when 021> is ide~. 


tical in two cases then 02 
0 is identical in these cases, so that in reality 


the encipherment is by no means truly digrapbic in characte~ 
Described in cryptographic terms, the encipherment of 01v is pol~~ 
alphabetic in character whereas that of 02n is mononlphabetic. A mor-e 
obvious pictme of tlus condition is brought out in the following real:'. 
rangement of Table 2. 


TABLE 3 


oz 
0 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 


A W E S T I N G H 0 U A R B K C D F J L M P Q V X Y Z 
B 
ESTINGHOUARBKCDFJLMPQVXYZW 
C S T I N G H 0 U A R B K C D F J L M P Q V X Y Z W E 
D T I N G H 0 U A R B K C D F J L M P Q V X Y Z W E S 
E 
I N G H 0 U A R B K C D F J L M P Q V X Y Z W E S T 


F 
NGHOUARBKCDFJLMPQVXYZWESTI 


G G H 0 U A R B K C D F J L M P Q V X Y Z W E S T I N 
H 
HOUARBKCDFJLMPQVXYZWESTING 


I 
0 U A R B K C D F J L M P Q V X Y Z W E S T I N G H 
J 
UARBKCDFJLMPQVXYZWESTINGHO 


K A R B K C D F J L M P Q V X Y Z W E S T I N G H 0 U 
L 
RBKCDFJLMPQVXYZWESTINGHOUA 


.,M 
BKCDFJLMPQVXYZWESTINGHOUAR 


'"'N KCDFJLMPQVXYZWESTINGHOUARB 


0 
C D F J L M P Q V X Y Z W E S T I N G H 0 U A R B K 


P 
D F J L M P Q V X Y Z W E S T I N G H 0 U A R B K C 


Q F J L M P Q V X Y Z W E S T I N G H 0 U A R B K C D 
R 
J L M P Q V X Y Z W E S T I N G H 0 U A R B K C D F 


S 
L M P Q V X Y Z W E S T I N G H 0 U A R B K C D F J 
T M P Q V X Y Z W E S T I N G H 0 U A R B K C D F J L 
U P Q V X Y Z W E S T I N G H 0 U A R B K C D F J L M 
V Q V X Y Z W E S T I N G H 0 U A R B K C D F J L M P 
W V X Y Z W E S T I N G H 0 U A R B K C D F J L M P Q 
X X Y Z W E S T I N G H 0 U A R B K C D F J L M P Q V 
Y Y Z W E S T I N G H 0 U A R B K C D F J L M P Q V X 
Z Z W E S T I N G H 0 U A R B K C D F J L M P Q V X Y 


02 
0 
G E N R A L C T I 0 M P Y B D F H J K Q S U V W X Z 


h. By a slight modification in arrangement but with no change in 


ba ic principle, the encipherment can be made mononJphnb tic so 
far as 01v is concerned, and polyalphabotic so far as 02 


11 is concerned. 
Note Table 4. 


OLv 01o 
A W 
BE 
c s 
D T 
E I 
F N 
G G 
HI-I 
I 0 
J u 
K A 
L R 
M B 
N K 
0 c 
p D 
Q F 
R J 
S L 
T M 
up 
v Q 
w v 
X X 
y y 
z z 
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TABLE 4 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


G E N R A L C T I 0 M P Y B D F H J K Q S U V W X Z 
E N R A L C T I 0 M P Y B D F H J K Q S U V W X Z G 
N R A L C T I 0 M P Y B D F H J K Q S U V W X Z G E 
R A L C T I 0 M P Y B D F H J K Q S U V W X Z G E N 
A L C T I 0 M P Y B D F H J K Q S U V W X Z G E N R 
L C T I 0 M P Y B D F H J K Q S U V W X Z G E N R A 
C T I 0 M P Y B D F H J K Q S U V W X Z G E N R A L 
T I 0 M P Y B D F H J K Q S U V W X Z G E N R A L C 
I 0 M P Y B D F H J K Q S U V W X Z G E N R A L C T 
0 M P Y B D F H J K Q S U V W X Z G E N R A L C T I 
M P Y B D F H J K Q S U V W X Z G E N R A L C T I 0 
P Y B D F H J K Q S U V W X Z G E N R A L C T I 0 M 
Y B D F H J K Q S U V W X Z G E N R A L C T I 0 M P 
B D F H J K Q S U V W X Z G E N R A L C T I 0 M P Y 
D F H J K Q S U V W X Z G E N R A L C T I 0 M P Y B 
F H J K Q S U V W X Z G E N R A L C T I 0 M P Y B D 
H J K Q S U V W X Z G E N R A L C T I 0 M P Y B D F 
J K Q S U V W X Z G E N R A L C T I 0 M P Y B D F H 
K Q S U V W X Z G E N R A L C T I 0 M P Y B D F H J 
Q S U V W X Z G E N R A L C T I 0 M P Y B D F H J K 
S U V W X Z G E N R A L C T I 0 M P Y B D F H J K Q 
U V W X Z G E N R A L C T I 0 M P Y B D F H J K Q S 
V W X Z G E N R A L C T I 0 M P Y B D F H J K Q S U 
W X Z G E N R A L C T I 0 M p y B D F H J K Q S U V 
X Z G E N R A L C T I 0 M p y B D F H J K Q S U V W 
Z G E N R A L C T I 0 M P Y B D F H J K Q S U V W X 


i. The results given by Table 3 or Tf1blc 4 may be duplicated by 
using sliding alphabets, as shown in Figures 32 ftnd 33. In the former, 
which corresponds to Table 3, Alphabets I and IV are fixed, II and III 
are mounted upon the same strip, which is movn.blc. 
To use these 
alphabets in encipherment, 81D of 81821, is located on Alphabet II and 
Alphabets II- III arc shifted so that 81P is beneath A on Alphabet I; 
82D is now sought in Alphabet I and 0182c ·will be found under it on 
Alphabets III and IV, respectively. Thus, for the Kord FIRE the 
successive positions oi the alphabet strips are as shown below, yielding 
the cipher resultant KlQA. 


I-ABCDEFGHIJKLMNOPQRSTUVWXYZ ______ _________ Fixed alphabet 
ll- 
FGHIJKLMNOPQRSTUVWXYZABCDE} 
Movable alphabet 


III-NGI-IOUARBKCDF JLMPQVXYZWESTI -- ------ - - 
IV-GENRALCTIOMPYBDFHJKQSUVWXZ ___ _________ -_Fixed alphabet 


I-ABCDEFGHIJKLMNOPQRSTUVWXYZ __________ ---_Fixed alphabet 


RE = QA 
II-RSTUVWX!ZABCDEFGHIJKLMNOPQ} 
____ Movable alphabet 


'o 
" III-JLMPQVXYZWESTINGHOUARBKCDF - -- - -- 


IV - GENRALCTIOMPYBDFHJKQSUVWXZ ________ -- -- -_Fixed alphabet 


FIGURE 32. 
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j. To correspond with Table 4 the alphabet strips are arranged as 


shown in Figure 33. 
Here Alphabets I and II are fixed, III and IV 


are mounted upon the same movable strip. To use these alphabets 
in encipherment, 02p of 0182 
0 is located on Alphabet IV and Alphabets 
III- IV are shifted so that 02 


1> (ID) is beneath A on Alphabet I; 811> (Fv) 


is now sought in Alphabet I and 8182 
0 will be found under it on Alpha- 


bets II and III, respectively. Thus, for the word FIRE, the succes- 
sive positions of the alphabet strips are as shown below, yielding the 
cipher resultant NBJU. 


I- ABCDEFGHIJKLMNOPQRSTUVWXYZ ___________ ___ Fixed alphabet 
F I = NB 
II- WESTINGHOUARBKCDFJLMPQVXYZ ___ _______ __ __ Fixed alphabet 


~ 
o III- 
IOMPYBDFHJKQSUVWXZGENRALCT} 
M 
bl 
1 h b t 


IV-IJKLMNOPQRSTUVWXYZABCDEFGH -- -------- 
ova e a P a c 


I- ABCDEFGHIJKLMNOPQRSTUVWXYZ- ____________ _ Fixed alphabet 


R (iJ = JU 
II-WESTINGHOUARBKCDF JLMPQVXYZ ____________ __ Fixed alphabet 


'o 
• III-ALCTIOMPYBDFHJKQSUVWXZGENR} 
a1 1 abet 


IV- 
EFGHIJKLMNOPQRSTUVWXYZABCD -- -------- Movable 
P 


1 


FIOUUE 33. 


k. Neither Table 3 nor Table 4 presents the possibilities such tables 
might afford for digraphic substitution. They may, however, be 
rearranged so as to give results that will approach more closely to the 
desired ideal as to nonrelationship between cipher equivalents of 
plain-text pairs having an identical letter in common. 
Note that in 
Table 5, which is based upon the same primary alphabets as Table 3 
and Table 4, the cipher equivalents aro the samo n in the latter 
tables, but they have been so distributed as to elinlln.ate the unde- 
sirable and externally obvious relationship referred to. 
(In any 
table of this natme there can be only 676 different pairs of equiva- 
lents, since the table presents merely the permutations of the 26 
letters taken two at a time. It is the distribution of the pairs which 
is important.) 


l. Table 5 still shows symmetry in its construction, and a suspicion 


of its existence formed during the preliminary stages of cryptanalysis 
would aid materially in hastening final solution. 


m. The foregoing tables have all been digraphic in natme, but a 


kind of false trigraphic substitution may be also accomplished by 
means of such tables, as illustrated in the accompanying Table 6, 
which is the same as Table 5 with the addition of one more alphabet 
at the top of the table. 


A 


]! 


c 


D 


lil 


F 


G 


H 


I 


J 


X 


L 


... 
0> Po u 


N 


0 


p 


R 
s 


T 


u 
v 


\'f 


X 


y 
z 
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TAUJ.E5 


92 


p 


A B C D E F G H I J K L M n 0 P ~ R S T ~ V 'If X Y Z 
·w E s T I 
N G H 0 u .A. R B K c D J' J 
L 
14 
p 
Q V X y z 
z X II v u s 
Q. 
K J 
H '1 
D :e y 
p 
II 0 
I 
T c L 
A R I! E 
G 


E s T I 
N G H 0 u A R 
]! K 0 
D :r J 
L 
ld 
p 
Q v X y z w 


G z X 
1r v u s 
0. 
K J 
H '1 
D B y 
p 
ld 0 
I 
T c L 
A R !I E 


s T I 
I! G H 0 u A0 
RK B 
K 
C D :r 
J 
L I! p 
Q . V X y z W E 
lli 
G z X w v u s 
J 
R J' D B y p 
I! 0 
I 
T C L A R I! 


T I 
N G R 0 u A R B K 0 
D J' J 
L 
ld 
p 
Q v X y z IY 
E s 


N E G z X w v u s Q I 
J 
H J' 
D B 
y 
p 
I& 
0 
I 
T c L 
A R 
I 
N G H 0 u A 
R B 
K 
C D J' J 
L I! p 
Q v X y z w E s T 
R N ! 
G z X w v t1 s 0 
K J 
H F 
D B y p 
lA 
0 
I 
T c L 
A 


l'l 
G H 0 u .A. 
R 
B It c D ., J 
L 
ld 
p 
Q v X y z w E s T I 


A R N E G z X 
'11 v u s Q K J 
H F D B 
y p 
M 0 
I 
T c L 
G H 0 u A 
R 
B 
K c D F 
J 
L u p 
Q v X y z w E s T I 
I! 


L 
A 
R N E G z X 
11' v u s 
Q. 
K J 
H F D B 
y 
p 
I& 
0 
I 
T c 


H 0 u A 
R B 
K 
0 
D F J 
L 
ld 
p 
Q v X y z IY 
E s T I 
}I 
G 


0 
L A R N E 
G z X w v u s Q K 
J 
H F 
D B 
y 
p 
).{ 0 
I 
T 


0 u A R B 
K 0 
D F J 
L 
ld p 
Q v X y z w E s T 
I 
N G H 
T c L 
A R N E G z X 
IY v u s Q K J 
H F 
D B 
y p 
IJ 
0 
I 
u A 
R B I c D F J 
L 
ld 
p 
Q v X y 
z w E s T I 
II G H 0 


I 
T 0 
L A R 
N E G Z 
X w v u s 0 
K J 
H F 
D B y p 
l.l 0 


A 
R 
B 
K c D F J 
L 
!.! 
p 
Q v X y 
z 
WQ E s T 
I 
N G H 0 u 


0 
I 
T c L 
A R N E 
G z X W v u s 
K J 
H F 
D D y p 
t! 


R B 
K c D F J 
L 
I! p 
Q v X y z 
1'1 
E s [T 
I 
N G H 0 u A 


ld 
0 
I 
T c L 
A R N E G z X w v u s Q K J 
H 
F D B y p 


B 
K c D F J 
L II [P 
Q v X IY IZ 
[W 
E 
S [T [I Q N G IH 0 u A R 


p 
!.1 
0 
I 
T 0 
L 
A R 
N E G z X w v u s 
K J 
H F 
D 
B y 


z y 
X v Q p 
M L 
J 


~, 
D c K B R A u 0 
H G 


110. 


1 
T s E w 


z 
G E N R 
A L 
0 
T I 
0 
M p 
y :a 
D j' H J 
K 
s u v w X 


y 
X v ~ p 
lA 
L J 
F 
D c K B R A u 0 
H G N I 
T s E 
'11 z 


X z G E II R A L c T 
I 
0 u p 
y 
B 
D F H J 
K Q s u v w 


[.X: 
[V l"z [t'G [M [L [J 
F 
D c K 
B R A u 0 
H G N 
I 
T s 
!1 
VI z y 
., X 
E 
N R A 
L c T 
I 
0 
lA 
p 
y 
B D F H J 
K Q s u v 


v Q p 
!.! 
L J 
F D c K 
B 
R A u 0 
H G N I 
T s E 
IY z y X 


v '11 
X z G E 
N R A L c T I 
0 
M p 
y 
B D F 
H J 
K Q s u 


Q p 
lA 
L J 
ll' 
D c K 
B R A U 0 
H G N I 
T s E 
Vf z y 
X v 
u v w X 
z 
G E I! R A L c T I 
0 
lA 
p 
y 
B D F 
H J 
K Q s 


IP 
[M 
L [J F D c [K 
B R A u 0 
H G [N 
I 
IT s E 
IY z y 
X v \ 
s u v w X z G E !I R 
A L c T I 
0 
lA 
p 
y 
B 
D F H J K 


14 
L J 
F D c K 
B R A u 0 
H G N I 
T s E 
11 z y 
X v Q p 


Q s u v w X z G E N R A L c T 
I 
0 M p 
y 
B 
D F 
H J 
K 


L IJ'Q F 
D 0 
K B R 
A u 0 
H G ll I 
T s E 
IY z y X v ... p 
11 


K 
s u v Tf 
X z G E ll R A L c T I 
0 
lJ p 
y 
B 
D F H J 


J 
F 
D 0 
K B 
R A u 0 
H G ll I 
T s E 
IV z y 
X v Q p 
L! 
L 


J 
K 
Q. s u v IY X z G E 
N R A L c T I 
0 
M p y B D F H 


F 
D c K 
B 
R A u 0 
H G u I 
T s E 
11 z y X v Q p 
14 
L J 


H J 
K 
Q. s u v w X z G E ll R A 
L c T I 
0 
u · P y 
B D F 


D c K 
:B 
R 
A u 10 
H G N 
I IT s E w z y X v Q. 
p 
!.! 
L J 
F 


F 
H J 
K Q s u v w X z G E ll R A L c T I 
0 
!I p 
y 
B D 
c K B R 
A 
UQ. 0 
H G N 1 T s E 
\1 z y X v Q p 
M L J 
F 
D 


D F H J 
K 
s u v 11 
X z G E Ii R A L c T I 
0 u p 
y 
B 


K B R 
A u 0 
H G N 
I 
T s E ll z y X v Q. [P 
l.l 
L J 
F 
D c 


B 
D F 
H J 
K 
Q. s u v \7 
X z G E ll R A L 
0 
T I 
0 
lA 
p 
y 


-. 


III. 
IV. 


I.rr. 
A w 
B E 
c s 
D T 
E I 
F 
N 


G G 
H 
H 


I 
0 


J u 
K 
A 
L 
R 
M B 
N 
K 


0 c 
p 
D 
Q F 
R J 
s L 
T 
M 
u p 
v Q 
w v 
X 
X 
y 
y 
z z 
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T ADLE 6 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
R A D I 0 C P T N F M E B G H J K L Q S U V W X Y z 


G E N R A L C T I 0 M P Y B D F H J K Q S U V W X Z 
E N R A L C T I 0 M P Y B D F H J K Q S U V W X Z G 
N R A L C T I 0 M P Y B D F H J K Q S U V W X Z G E 
R A L C T I 0 M P Y B D F H J K Q S U V W X Z G E N 
A L C T I 0 M P Y B D F H J K Q S U V W X Z G E N R 
L C T I 0 M P Y B D F H J K Q S U V W X Z G E N R A 
C T I 0 M P Y B D F H J K Q S U V W X Z G E N R A L 
T I 0 M P Y B D F H J K Q S U V W X Z G E N R A L C 
I 0 M P Y B D F H J K Q S U V W X Z G E N R A L C T 
0 M P Y B D F H J K Q S U V W X Z G E N R A L C T I 
M P Y B D F H J K Q S U V W X Z G E N R A L C T I 0 
P Y B D F H J K Q S U V W X Z G E N R A L C T I 0 M 
Y B D F H J K Q S U V W X Z G E N R A L C T I 0 M P 
B D F H J K Q S U V W X Z G E N R A L C T I 0 M P Y 
D F H J K Q S U V W X Z G E N R A L C T I 0 M P Y B 
F H J K Q S U V W X Z G E N R A L C T I 0 M P Y B D 
H J K Q S U V W X Z G E N R A L C T I 0 M P Y B D F 
J K Q S U V W X Z G E N R A L C T I 0 M P Y B D F H 
K Q S U V W X Z G E N R A L C T I 0 M P Y B D F H J 
Q S U V W X Z G E N R A L C T I 0 M P Y B D F H J K 
S U V W X Z G E N R A L C T I 0 M P Y B D F H J K Q 
U V W X Z G E N R A L C T I 0 M P Y B D F H J K Q S 
V W X Z G E N R A L C T I 0 M P Y B D F H J K Q S U 
W X Z G E N R A L C T I 0 M P Y B D F H J K Q S U V 
X Z G E N R A L C T I 0 M P Y B D F H J K Q S U V W 
Z G E N R A L C T I 0 M P Y B D F H J K Q S U V W X 


n. In using this table, 01v is located in Alphabet I, and its equivalent, 


0\, taken from Alphabet II; 02 


0 is located in Alphabet III, and its 


equivalent, fJ20 , taken from Alphabet IV; 83 


0 is the lett r lying at the 
intersection of the row indicated by 03v in Alphabet I and the column 
determined by 82w 
Thus, FIRE LINES would be enciphered NNZ 


IEQ KOV. It is obvious, however, that only the oncipherment o£ 
0 
3v is polyalphabetic in character; 01v and 82v are enciphered purely 
monoalphabetically. Various other agreements may be made with 
respect to the alphabets in which the plain-text letter will be sought 
in such a table, but the basic cryptographic principles are the same as 
in the case described. 


o. Digraphic tables employing numerical equivalents instead of 


letter equivalents are, of course, possible but in this case the number 
of equivalents required, 676, means that combinations o£ three figures 
must be used. 
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SECTION VIII 


CHECKERBOARD DIGRAPHIC SUBSTITUTION 


Paragraph 


Disadvantages of large tables_________ ________ ________________________ 
32 


Four-alphabet checkerboards _____________ _______________ ____________ _ 33 
Two-alphabet checkerboards___________ __ _____________________________ 
34 


One-alphabet checkerboards; Playfair Cipher _______________ __ ___________ 
35 
Rectangular designs________ ________ _________________________ ___ _____ 
36 
Combined alphabetical and numerical checkerboard ________ _____________ 
37 


32. Disadvantages of large tables.-Digraphic substitution by 
means of tables such n.s those illustrated in Tables 1, 2, and 5 is 
impractical for military use on account of the relatively large size that 
the table takes, and the inconvenience in their production, change, 
distribution, and handling. Ju t as it has been noted in Section XII, 
Special Text No. 165, Elementary Military Cryptography, that simple 
sliding alphabet strips can replace large quadricular tables, so it 
will be found that small designs similar to a checkerboard can replace 
the large quadricular tables in digraphic substitution. Although the 
usual chess or checkerboard is based on a square 8 by 8, with 64 cells, 
the term checlce1'boa1'd will here be used to designate any square design 
with n2 cells. 


33. Four-alphabet checkerboards.- a. The simple or single- 


a.lphabet checkerboard consists of a square 5 by 5, containing 25 cells 
in which the letters of a 25-element a.lphabet (I and J being inter- 
changeable) are inserted in any prearranged order. When four such 
checkerboard alphabets are arranged in a large square as shown in 
Figure 34, the latter may be employed for digraphic substitution to 
yield the same cipher results as does the much larger Table 1 (par. 31 ). 
In this square, 0\> of OOv is sought in section 1; 02 


1)) in section 2. 
Thus, 


0\) and 02v will always form the northwest-southeast corners of an 
imaginary rectangle delimited by these two letters as located in these 
two sections of the square. Then 01 
0 and 02 
0 arc, respectively, the 


letters at the northeast-southwest corners of this same rectangle. 
Thus, TGv= TKo; WDv=TXo; ORv= PSo; URv=WPo, etc. In 
decryptographing, 01 c and 02 
0 are sought in sections 3 and 4, respectively, 


and their equivalents, 01v and 02v, noted in sections 1 and 2, respec- 
tively. It may, of course, be prearranged that 01v should be sought 
in the section now labeled3, 02v, in that labeled 4, whereupon 0 
1c would 


be located in the section now labeled 1, 02 


0 , in that now labeled 2. 
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T w E 
N 
y 
F 
0 
u 
R 
T 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


K 
L 
M 
0 s 
L 
M 
p 
Q 
E 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


Sec. 1 (0\,) 
H v z 
p 
I 
K 
y z s 
N 
Sec. 3 (01 
0) 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


G u 
R 
Q 
X 
I 
X w v A 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


F 
D c 
B 
A 
H 
G 
D c 
B 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


T 
H 
I 
R 
E 
F 
I 
v 
E 
A 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


0 
p 
Q s ~ ~_!'_ 


Q 
R s 
B 


M 
y z u 
A 
0 
y z 
T c 
-- 


L 
X w v 
B 
N 
X w u 
D 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


K 
G 
F 
D c 
M 
L 
K 
H 
G 


FIGURE 3~. 


b. It is possible to construct a digraphic substitution checkerboard 


that shows reciprocity in its OOD= OOo relationship so tbat if ABD=XY., 
for example, then XYD= AB0 • 
Two conditions nre e ential to assure 


reciprocity. These are tak n into con ideration in the establishment 
of the 0102 
0 , or deciphering sections, and an example will serve to 


explain the process. 
c. Two enciphering alphabets are fu·st constructed; one in section 1 
for 01p, the other in section 2 for 02D, as shown in Figure 35a. 
The 
alphabet in section 3 is now to be constructed. Any horizontal row 


1 


2 


Sec. 1 (0\,) 3 


4 


5 


1 
2 
3 
4 
5 


B w G 
R 
M 


- ·-- 
- 
- 
- 
- 
- 
- 
- 


N 
y 
v 
X 
E 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


s 
I 
c 
T 
K 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


u 
p 
L 
A 
0 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 


D z 
F 
Q 
H 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
c X 
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of section 1 is taken, for example, the row labeled 1, consisting of the 
letters BWGRM, and these letters are written on any horizontal row 
of section 3, in any transposed order, which is immediately written 
at the top of section 3, as shown in Figure 35b. 
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Row 1 of section 1 was inserted in row 4 of section 3. The recip- 


rocal permutation of 1 4 is 4 1, and therefore row 4 of section 1 must 
now be inserted in row 1 of section 3, and in the transposed order 
5--2-4-1- 3, as indicated at the top of section 3. The result is shown 
in Figme 35c. Then row 2 of section 1 is transferred to another row 
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of section 3, for example, the fifth, and the letters inserted ill t46 
already indicated transposed order. 
Immediately thereafter, in otd~r 


to continue the reciprocal permutation relationship, row 5 of section 
1 becomes row 2 of section 3. 
This leaves row 3 of section! to beco:m.e 


also row 3 of section 3, and to be reciprocal to itself. 
The result is 


shown in Figure 35d, where section 3 is completely constructed. The 
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foregoing principle of permutation reciprocity applies equally to the 
rows of section 4. 
Suppose the permutation 3- 5- 1-4- 2 is decided 
upon for the rows of section 4. 
This means that rows 1 and 3 of 


section 2 become rows 3 and 1 of section 4; rows 2 and 5 of section 2 
become 5 and 2 of section 4; row 4 of section 2 becomes row 4 of 
section 4. 
As regards the transposed order within the rows of section 


4, the following rule applies: The letters forming a complete column 
from the top of section 3 to the bottom of secLion 2, whatever their 
order, must also form a complete column from the top of section 1 
to the bottom of section 4. 
For example, the column designated by 


the number 5 of section 3 contains tho letters OHKMECOSGT; 
column 5 of section 1 contains five of those letters, MEKOH; there- 
fore, the completed column must contain the letters COSGT but 
. 
' 
m the transposed order given by the permutation selected for the 
rows of section 4, viz, 3- 5- 1-4- 2. 
The completed square is then as shown in FiO'uro 35o and exhibit 


. 
. 
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reCiprocity throughout. Example: BBv= LW0 , and LWI>= BB 
0 
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d. The total number of reciprocal permutations of fi c lern nts is 


26, as follows: 


(2) 12354 
(3) 12435 
(4) 12543 
(5) 13245 
(6) 13254 


(7) 14325 
(8) 14523 
(9) 15342 


(10) 154.32 
(11) 21345 


(l) ~ 
(12) 21354 
(13) 21435 
(14) 21543 
(15) 32145 
(16) 32154 


(17) 34125 
(1 ) 3514.2 
(19) 42315 
(20) 43215 
(21) 42513 


(22) 45312 
(23) 52341 
(24) 52431 
(25) 53241 
(26) 54321 


Since the row permutations of sections 2 and 4 are ind p nd nt, the 
total number of d.illcrcnt four-alphabet squares as regard r w permu- 
tations is 262= 676. 
Tailing into ac ount the column p rmutation , 


5X4X3X2X 1 in number, it is th refore possible to have 676 X l20 
or 81,120 different, four-alphabet checkerboards of this nature, bused 
upon the same two alphabets in sections 1 and 3. 
With hunges in 


the latter, the number, of corn· e, be omes very much gr ater. 


34. Two-alphabet checkerboards.- a. It is po ible to effoct 


digraphic substitution with a checkerboard con i ting of but tw 
sections by a modifi ation in Lhc method 
f finding equival nts. 


In the che kcrboard shown in Figure 36, 81 
0 o£ 0'821> is located in the 


square at the left, 02p, in the square at the right. 


When 8182 


0 are at the opposite nds o£ tho diagonal of the imaginary 


rectangle defined by the lett rs, 0'02 


0 are at th opposite ends of the 


other diagonal of the same rectangle, just as in the preceding ca e. 
For example, ALp=TTc; OI>= Gc; ATI>= TAc; EIII>= IIE •. 


b. Reciprocity may be imparted to the 2-section cb ckerboard by 


reciprocal permutation of the rows of the checkerboard, no attempt 
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FIGURE 36. 


being made to o.IIect any reciprocal permutation of columns. Figure 
37 shows such a checkerboard. 
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FIGUIIE 37. 


Here, for example, AW"=OT. and OTI>=AWo; BAD= DLo and 
DLD= BAc, etc. 


c. In 2-alphabet checkerboards in which one section is directly 


above the other, reciprocity already exists without special prepara- 
tions for its production. In Figure 38, MO"= UA0 and UAp=MOc; 
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MAP=MAe and MAe= MAD. 
When both 81p nnd 82 
0 happen to h in 


the same column, there is really no encipherment, a fact which con- 
stitutes an important disadvantage of this method. This disadvan- 
tage is only slightly less obvious in tho preceding cas s wh re the 
cipher equivalent of such a case of 0 


1 0 2~ consists merely of the plain- 


text letters in reversed order, yielding 8281 
0 • 


35. One-alphabet checkerboards; Playfair Cipher.-a. By 


reducing the checkerboard to one alphabet, there r ults he squur 
of the well-known Playfair Cipher, u d for many ears as a field 
cipher in the British Army. For a short time, 1917-18, it w 
prescribed as a field cipher for use in the Unit d States Army. A 
modification in the method of finding cipher equivnl nts has b en 
found useful in imparting a great r d gree of security than that 
afforded in the preceding types of checkerboard methods. 
Figure 39 
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FIGURE 30. 


shows a typical Playfair square. The usual method of ncipherm nt 
can be best e>.."J>lained by examples given und r four aLegorics: 


(1) Members of the plain-text pair, 01 P and 82 PI ar at pp it ends of 


the diagonal of an imaginary r ·tangle defined by the two 1 t r. ; th 
members of the cipher-text pair, 81 
0 and 82 


0, are at th oppo ite nd 


of the other diagonal of tlus imaginary rectangle. Exampl : 
MOp= ALe; MID= UCc; LU0 =QMe; VIP= YCo• 


(2) 81p and 82p are in the same row; the l ttor imroediat ly to th 


right of 01p forms 81e, the l~tter immediately to th right of 0 


2 
p forms 


£J20 • 
When either 81p or 02p is at the extreme right of th row, th fir. t 


letterintherowbecomesitsBc. Examples: M p= ANe;MUv= A]\; 
AFD=NMc; FAP=MN0 • 


(3) 81p and 82p are in the same column; tb letter immediately b lr>w 


81p forms 81 
0, the letter immediately below 82 


0 forms 82e· 
When either 


81 


11 or 82p is at the bottom of the column, the top lett r in that c lmnn 


becom~ its 80 • 
Examples: MCP= Be; AWP=TAc; \VAP- 11\; 


QUp=Yi e· 
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(4) 0\, and 02p are identical; they a.re to be sepamted by inserting a 
null, usually the letter X or Q. 
For example, the word BATTLES 


would be enciphered thus: 


BA TX TL ES 
DM RW CO KP 


b. The Playfair square is automatically reciprocal so far as encipher- 
ments of type (1) above are concerned; but this is not true of encipher- 
ments of typo (2) or (3). 


36. Rectangular designs.-a. It is not essential that checker- 
boards for digraphic substitution be in the shape of perfect squares; 
rectangular designs will s rvc equally well, with little or no modifica- 
tion in procedure. In four-alphabet and two-alphabet rectangles 
reciprocity can be produced by following the method indicated in 
paragraph 33. 
b. In Figures 40 and 41 ar shown two examples of such rectangles, 
together with illustrations of encipherments. Since the English 
alphabet consists of 26 lett rs, a number which can only form an 
impracticable r ctangle 2 by 13, and since the addition of any symbols 
such as the digits 1, 2, 3 ... to augment the number of elements to 27, 
28, 30, 32, 35, or 36 characters would result in producing cryptogram 
containing intermixtures of letters and figures, the only practicable 
scheme is to reduce the a.lphnbet to 24 lotLers as shown in the figure , 
where I serves also for J and U also f r V. 
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TH ER EA RE BE TT ER CR YP TO GR AM 
BS ME MS PR TM FQ ME HN DN BQ XE WE 


c. Two-a] phabet rectangles arc also po ible; iL i.· thou~h l lltn es- 


sary to demonstrate them by spe ific xampl . Tho g n rul xnm- 
ples shown in b above are considered suffici n . 


d. It is possible, however, and it may b pra ti abl to x nd th 


alphabet to 28, 30, or more characters by th · bubterfuge n w t be 
explained. Suppose one of the letters of th alphab tis omitl d fr m 
the set of 26letters, and suppose it is r plac d by 2, 3, r more JJair ·of 
letters, each pair having as one of it m mb rs tho miLt 
l'iw•l 


letter. Thus, in the ens 
I a on -n.lphab t Playfair d sign 
f r · 


tangular shape, jn which the 1 Ler K is mitted as a single 1 tt r, and 
the number of charact rs in the r ctangle is mad a total of 30 by the 
addition of five combinations of K with o h r 1 t rA, tho r 
Lnngle 


shown in Figure 42 may be con truct . An int r ting con. qu n e 
of this modification is that certain irregulariti s ar intr du d in the 
cryptogram, consisting in (1) the occasional replncem nt f O'Ot0 by 
616263 
0 , that is, of a digraph by a trigraph, (2) less fr quently, th re- 


placement of 6102031> by 010263(}4 


0, that is, of a trigraph by at tragraph, 


and (3) the appearance 
f variant Yalues. For xnmplc, A11 0= 


HKUc;GL;,= OK c;JKv= I \.KEc; ~K0 - BKE0 , or DKEc, r ~P,. , r 
TPc· So far as the de ryptographing i. c n rn d, thN would bt> n 
di:fficmlty, becaus the operuL r ulways c n id rs nn 
1 oc ·urring in 
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the cipher text as invariably forming a ligature with the succeeding 
letter, taking the pajr of letters as a unit. In decryptographing a et 
of letter , such as Gl-'c, he obtains CKOP; h disregards the 0. 


e. As a final note it may be add d that it is, of course, possible to 
insert the 1 ttors within a checkerboard or a rectangle in a less sy - 
iematic order than that indicated in the various examples. 
Th 


letters may be inserted at mndom or by f ollowing the principles of y - 
tematically-mixed alphabet·, o that no definite sequence is apparent in 


tl~e declcerboard or rectangle. 
37. Combined alphabetical and numerical checkerboard.-a. 


In Figme 43 is shown a 4-seciion chcckerbonrd which presents a 
rather interesting feature in that it makes possible the substitution of 
3-figure combinations for digntphs in a unique manner. To encipher 
a message one proceeds as usual to find tJ1e numerical equivalents of a 
pair, and then ih se numbers are added together. 
Thus: 


Plain text: 
PR OC EE DI NO 
275 350 100 075 325 


9 13 
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Ciphel' text,: 284 3G3 124 093 332 
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b. To decipher such a cryptogram, take the greatest multiple of 


25 contained in the group of three digits; tbis multipl and its r - 
mainder form the elements fol' d t rmining the plain-text pair in the 
usual manner. Thus, 284= 275+9=PR. 
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the key _____ ------- -------- - - - ____ _ _ __ _ _ _ _ _ _ _ 
_ _ _ _ _ _ _ _ _ _ _ 
4-1 


Mechanical cryptographs in which periodicity is avoided _ 
45 


38. Preliminary remarks.- In paragraph G3, 
pecinl Text N . 


165, brief reference was made to more comple.· ubstitution Rys tf'ms. 
It was stated that thoro arc certain polyalpbab tic m tl1ods in whi<'h 
periodicity is absent; there are oth r ntetbods in which thl' c•xt .ruul 
manifestation of periodicity in cryptograms is pr vent d, or in whir.h 
it is suppressed or disguised. 
Slight hints w<.'r<' tlH·n given as to the 


nature of some o£ these methods. This and then xt two sections f 
the present text are devoted to a more detailed d scription and dis- 
cussion of the methods indicated, which, u a 
lu ~s, may be designut d 


as aperiodic systems, as contrast d wiLh the pr viously d scrib d, mor 
simple, periodic systems. 


39. Continuous or nonrepeating-key systems.-a. On of the 


3implest methods o£ avoiding periodicity occa ioned by tho C'mploy- 
ment of more than one substitution alphabet is to u. c as th key fcJr 
the encipherment of one or more roes agos a seri s of lett r or char- 
acters that does not repeat itself. The running t xt of a bo k, 
identical copies o£ which are in possession o£ the orrespondents, may 
serve as the key for this purpose. It is only n e sary for th 
or- 


respondents to agree as to the starting point of the k y, or lo nrruugc 
a system of indicating this starting point in the text of the cr pto- 
gram. Such a system is called a continuou -key s s em. 
tlH•r 


names applied to it aro nonrepeating, running, or indefinitc-kry Hy Ht 'Ill 
Telephone directories, the Bible, standard reference work , tc., ur 
often used as source books for su h k ys. 


b. Various types o£ cipher alphabets may be employN] in thi 


system, direct or reversed standard alphab ts, mixed alpbab 
dru"n 


up at random, or secondary mixed nlphabets resulting from the inter- 
action of two primary sliding mixed components. 


589405° 
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c. As an example of the method of cryptographing, suppose the 
following message is to be enciphered on the continuous key prin- 
ciple, using as the key the text of this subparagraph, beginning AS 
A 
EXAMPLE ... , and reversed standard alphabets: 


HEAVY INTERDICTION FIRE FALLING AT···· 


Key text: 
ASANE XAMPL EOFTH EMETH ODOFC RYPTO 


Plain text: 
HEAVY INTER DICTI ONFIR EFALL INGAT · 


Cryptogram: TOASG PNTLU BGDAZ QZZLQ KYOUR JLJTV · 


40. Auto-key systems.-a. The cipher letters of a cryptogram 
may serve as keylettors, thus automatically furnishing a key. Sup- 
pose, for example, that two corT spondents agree to use th~ word 
TRUE as an initial key, and suppose the message to be enciphered 
(with the obsolete U. S. Army ipher disk) is as follows: 


HEAVY INTERDICTION FIRE FALLING AT · · · · 


The first four letters are enciphered as shown: 


Key text: 
TRUE 


Plain text: 
HEAVY INTER DICTI ONFIR EFALL INGAT ' . ' 
Cryptogram: MNUJ 


The cipher letters MNUJ now form tho koyletters for encip~e~:g 


the next four plain-text letters YINT vielding OFHQ. The ad er 
h 
f 
' 
' J. 
1 tters an so 
t en orm the keyletters for enciphering the next four e 
' 
on, yielding the following: 


Key text: 
TRUEM NUJOF HQKOE IIVWU VQODR LOSGD 


Plain text: 
HEAVY INTER DICTI ONFIR EFALL INGAT 


Cryptogram: MNUJO FHQKO EIIVW UVQOD RLOSG DBMGK 


b. Instead of using the cipher letters in sets, as shown, the last 
· h 
1 
· 
the key• 
mp er otter given by the use of the keyword maY become 
f h 


letter for enciphering the plain-text letter. the cipher resultant 0 t e 
latter then becomes the keyletter for e·nci~hering the following letter, 
and so on to the end of the message. 
Thus: 


Key text: 
TRUEJ LDQXT CZRPW OANIA JFAAP EWJDA 


Plain text: 
HEAVY INTER DICTI ONFIR EFALL INGAT 
Cryptogram: MNUJL DQXTC ZRPWO ANIAJ FAAPE WJDAH 


c. It is obvious that an initial keyword is not necessary; a single 


prearranged letter will do. 
d: !~e plain text itself may serve as a key, after an initial group ?r 


an rmtral letter. This is shown in the following example, wherem 
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the text of the message itself, after the prearranged initinl keyword 
TRUE, forms the key text: 


Key text: 
TRUEH EAVYI NTERD ICTIO NFIRE FALLI 


Plain text: 
HEAVY INTER DICTI ONFIR EFALL INGAT 


Cryptogram: MNUJJ WNCUR KLCYV UPOAX JAIGT XNFLP 


e. Although reversed standard alphabets have been used in all the 


foregoing examples, it is obvious th~t various types of alphabets may 
be employed, as prearranged. 
/ The following method, though it may at first appear to be quite 


different, is in reaJity identical with those just described. A mixed 
sequence is prepared and its elements numbered in sequence. Let 
the l11L'I::ed sequence be derived from the keyword PERMUTABL Y: 


6 3 7 5 9 8 1 2 4 10 
P E R M U T A B L Y 
C D F G H I J K N 0 
Q S V W X Z 


AJBKEDSLN M G W p C Q R F V T I Z U H X Y 0 
l 2 3 4 5 6 7 8 9 10 ll 12 13 1415 16 17 18 19 20 21 22 23 24 25 26 


Let the message be the same as before and let the first letter be its 
own cipher equivalent. Each cipher 


1 
letter from that point on is 


produced in turn by frnding tho sum of the numerical equivalents of 
tho prece:ling cipher letter and the plain-text letter to he enciphered. 
When tlns total exceeds 26, the latter amount is deducted and the 
letter equivalent o£ the remainder is taken for the cipher letter. Thus: 


Kc~ text: 
0 23 
2 
3 21 20 14 23 16 21 11 17 11 25 18 12 12 


Plam text: 
H 
E 
A 
V 
y 
I 
N 
T 
E 
R 
D 
I 
C 
T 
I 
0 
N 


Numericalvalue: 23 
5 
1 18 25 20 
9 19 
5 16 
6 20 14 19 20 26 
9 


Keyed value: 
28 
3 21 46 40 23 42 21 37 17 37 25 44 38 38 21 


(less 26 or 52 if 
necessary): 
23 
2 
3 21 20 14 23 16 21 11 17 11 25 18 12 12 21 


Cipher text: 
H J 
B z I 
C H R z G F 
G y V W W z 
Key text: 
21 12 
6 22 
1 18 19 1 
9 
3 12 23 24 


Plain text: 
F 
I 
R E 
F 
A L L 
I 
N G A T 


Numericalvalue: 17 20 16 
5 17 1 
8 
8 20 
9 11 
1 19 


Keyed value: 
38 32 22 27 18 19 27 
9 29 12 23 24 43 


(less 26 or 52 if 


necessary): 
12 
6 22 
1 18 19 1 
9 
3 12 23 24 17 


Cipher text: 
W D U A V T 
A N B W H X F 


g. In the foregoing e:x;ample the successive cipher letters form ~he 


successive keyletters. but as noted in subparagraph d, the successive 


, 
I 
I 
plam-text letters may serve as the successive keylette~·s. . . 
. 
h. The same results can be obtained by the u e of slidmg stnps 


bearing the mixed alphabet. Study the following di11gram showing 
the successive positions of the movable strip and compare the results 
with those obtained inj above. 


Numbers: 
Key: 
Plain text: 
Cipher: 


Numbers: 
Key: 
Plain text: 
Cipher: 


Cryptogram: 
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1 
12 
10 
5 
E XTIXTIXTIXTI TINTINTINT INGIN 
C OLLECTALLSTR AGGLERSSTO PSEND 
C JIXTRPXIXFAR TCHIEWBQUF TVCVK 


7 
3 
11 


NGUNGUN GUI UISUISU 
THEMFOR WAR DATONCE 
UZQBBGW KUR RIZGVQQ 


CJIXT RPXIX FARTC HIEWB QUFTV 
CVKUZ QBBGW KURRI ZGVQQ 


e. Another simple method of prearranging the interruption of It 


keyword or of plain text is to employ the sequence of numbers given 
by reducinr.r n,n incommensurate fraction to decimals. For example, 
b 
• 


tho fraction 74 yields the sequence 142857142857 . . . This fractiOn 
may be represented by the indicator letter H given as the initial letter 
of the cryptogram. 
45. Mechanical cryptographs in which periodicity is 


avoided.- Thcre are certain cryptographs which operate in such_a 
manner that periodicity is avoided or suppressed. · Some of them~ 
be discussed in Section XII. Among them one of the mo t interestmg 
is that invented by Sir Charles Wheatstone in 1867. 
As a rule, ho,~­ 


ever, mechanical cryptographs, by their very nature, can hardly avo~d 
being cyclic in operation, thus causing periodicity to be exhibited m 
the cryptograms. 


C. REPETI'riVE AND COMBINED SYS'l'EMS 


'ECTION X 


REPETITIVE SYSTEMa 
Pnragraph 


Suporencipherment _____________ ____ --·--------- 
-------------- _ 46 


llepetitive transposition systems______ 
_ _____ --------- -------------- 
47 


Hepclitive monoalphabelic substitution systems__ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ t18 
Repolitivc polyalphabetic substilution system~-------------------------- 
t19 
46. Superencipherment.-a. When, for purposes of augmenting 
the degree of cryptographic security, the plain text of a message 
undergoes a fll'st or primary encipherment and the resulting cipher 
text then undergoes a second or secondary encipherment, the system 
as a whole is often referred to as one involving superencipherment. If 
the two or more processes are well selected, the objective is actually 
reached, and the resulting cryptograms present a relatively groat 
degree of cryptographic security; but sometimes this is not accom- 
plished and the augmented security is of a purely illusory character. 
The final cryptographic security may, in fact, be no greater in degree 
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than if a single encipherment had been effected, and in unusual cnses 
it may even be less than before. 
b. It is impossible to describe o.ll the combinations that might be 
employed; only a very few typico.l cases can here be treated , and these 
will be selected with o. view to illustrating general principles. It is 
possible to pass a message through 2, 3, ... succ ssive proccsse of 
substitution; or through 2, 3, . .. successive processes of tnmsposition; 
or substitution may be followed by transposition or vic verso.. An 
example of each type will be given. 


c. It will be convenient to adopt the symbol 0 to repro cnt the 


cipher text produced by any unspecified process of enciph rment. 
The symbols 01, 0 2, 0 3, ••• , will then represent the succcssiv texts 
produced by successive processes in superencipherm nt. The sub- 
script letter 8 or t may be prefixed to the 0 to indicate that a given 
process is one of substitution or of transposition. 
Thus, the steps in a 
system where a 1ll-st substitution is followed by a second substitution 
can be represented symbolically by 8Q 1~8Q2 • 
In a similar manner, 


tCc~tCz represents double transposition. 
The symbol 
sO~~tOz 


means that the tex.'t from a first process of substitution undergoes 
transposition as a second process . 


. 47 .. Repetitive transposition systems.- These ho,ve been dea~t 


With m Sections III and IV o.nd need no fmther discussion o.t tlus 
point. It was there shown that properly selected transposition 
methods, when repetitive in character, can produce cryptograms of 
very great security. 
48. Repetitive monoalphabetic substitution systems.-Sup- 
pose a message undergoes o. primary enciphcrmcnt by means of a 
single-mixed, nonreciproeo.l o.lphabet a.nd the primary cipher text 


l . 
' 
f the same or a 
unc 01goes a secondary encipherment by means 0 
. 
different mixed alphabet. The resulting cryptogro,m is stJll mo~o- 
1 h b . . 
1. 1 ·-r 
y auO'mentatwn 
a P a etlC ill cho.racter and presents very 1tt e, 1 an ' 
"' 
b 
. 
' 
. 
. 
f alpha et em- 
m the degree of seemity (depending upon the typ_e 0 . 
. 
1 d 
1 


1 
d 
. 
. ty 1s mvo ve anc 
P oye ) . Here an entixcly illusory increase m seCUll 
. d d be 
. ff 
d tb 
rocess may m ee 
an me ·ectual complexity is introduce ; 
0 P . 
. ul. t 
This is 
· 
t d · d fin' 
· 
d · 
the des1red res 
· 
Iepea o ill e 1tely Without pro ucmg 
betic substitution has 


because the fundamental natme of monoalpha . 
t 
perencipher- 


b 
l 
. 
. 
. th attempts a su 
not ecn ta cen mto consideratwn m 
e 
1 h b t·'c in character. 


0 
0 
.11 
· s monoa p a e 1 
rnent; 8 
1~8 2~803 ••• , st1 remam 
. · t • 
systems.-a. If 
49 R 
. . 
b t • subst1tu wn 
. 
epet1hve polyalpha e lC 
b . 
ting-key principle, 


the primary encipherment is by means of t .e r ep~paherment is similar 
. 
d h 
ondary enCl 
With standard alphabets, an t e sec 
1 
of similar length, the 


in character, with similar alphabets, and a m!ty o,t all 
Thus if the 
· 
. 
in secun 
· 
' 
final cryptogmm presents no _me1ease . 
. 
nt (Vigenere Method) 


key BODE is used in the pnmary enCipherme 
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. her111ent, the final 
. 
dary enc1p 
. 
. 1 
and the key FG HI is used m tho secon 
. had been used m a siDg e 


rrsulL is the same as though tho key GIKM 
en ipherment. 
. 
of tho primary o.nd the 
b II mixed alphab is are used, and 1f those · series of secondm·y 


8 c~ndary cneiphermcnt belong to tho sa~e arY sequences ag~insL 
alphabets r sulting from the sliding oi Lwo pllm . to those clescnbed 
· · 
. 
harltCLCI 
bt . d 
each oLhor, tbo results arc sm1ilnr 1.n c 
Lhat would be o ame 


tmcl r a above. 
They ar identical w1th those 
ropriate secondary 


by an equivalent single nciphonn nt by the !1PP 
alphabets. 
. 
f a cliiferent length 
· 1 .,., 0nt IS o 
h 
"el' 


C I f Lhe key for tho secondary ODClP 101'""' 
lL 
n1·e 
ower ' 
. 
. 
h resu s u • 
' 


from Lhat for tho primary 
nciph rm nt, L e . 
ltant cryptogram 


som what difi'ercnt, in Lhat Lh 
period of tho 1 esul ey lengths. For 


I tl 
two c 
· 4 
b comes Lhc least common multiple o 
· 1e 
'pherD1ent IS 
• 


xamplc, if the lengLh of Lho key I~r the prima~~ t~~:~gh a l.cey of 12 
that for Lho secondary 6, tho 1:esult ~s the sa~o rmeut. 
ThiS can b~ 


clements had been employed m a smgle enclpho 
d s-z-6-1-4-3. 


demonsLrntcd as follows, using Lho k ys 4- I- 2- 3 an 
412 3 .. . 


41234123 4 123 
4. 123 4 123 41 23 
r- 261··· 


52614352 6143 
526 14352 61 4 L~84 
9 3 
.. 


9 3 8 4 8 4 7 5 10 2 6 6 
9 3 8 4. 8 4 7 5 10 2 6 6 
· . creased 
. 
. 
. 
. 
'th . t doubt, m 
. 
d. The degr e of cryptograpluc security IS, Wl 
ou 
l ted that JS, 
?Y such a method. If tho key lengLhs are proporl! s.e. ec roduct, tho 
1f they present no common mu.lLiple less than theu P_ 111ple two 
. 
. 
For exa 
' 
meLhod may g1ve cryptograms of great secunty. 
. 
a cryptograJll 


keys that are 17 and 16 charact rs in length would give . h ·eel once 
that is equivalent in period to that of a cryptogram en c:e~ta.l prin- 
by a key 17 X 16, or 272 elem nts in length. 
The funda 
h cipher 


ciple of an excellent, Lbough complicated, prinLing tolegrap 
system is this very principle. 


SECTION XI 


COMBINED SYSTEMS 
pnragrapb 
50 
Combined mouoalphabetic and polyalphabctic substiLution systems-------- 
51 


Combined u bstitution-transposition in generaL __ _ _ 
_ ___ --- -------- -_- 


Mouoalphabetic and polynlphab t ic subsLiLution combined with transposJ- 
52 


t . 10)1____ ____ __ ______ ______ 
-- ---- -- -- ------- ---------- 
53 


Polylitcral subsLitution combined with transposiLion------------- - ---- - -- - 
54 


Fractionating sysLems_______ ______ 
- - - --- -- 


Comparison of foregoing fractionati~~- -s~~t~~ - ~;itl~- -~;1:t~l~ -- digraphic 


systcJnS-- -- - - -------- -- - - --- - ----------------- ------- -- - - -- - - --- - 
55 


Fractionat;ing systems as forms of combined substitution and transposiLion--- 
56 


Fractionation and rccombinaLion wiLhin regular or variable groupings of 


fracLional clements--- - --- - --- -- ------- .. ------------ - ____ ------ 
57 
Fractionation combined with columnar transposiLion. _ _ _ _ _ _ _ _ _ __ _ _ _ _ _ _ _ _ _ 58 
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50. Combined monoalphabetic and polyalphabetic substitu- 


tion systems.- a. If a mcssa.ge undcrg s a primary cnciphcrment 
by the repeating-key method, using sta.nda.rd ulphnb t.s, nnd the 
primary cipher text then undergoes a secondary enciphcrment by 
means of a sing] -mixed alpba1 ct, the dcgre of rypLographic sc u- 
rity is increased to the sam ext nt that it would b if the rigillal 
message had undergon th s11mc primary enciphermen L with Rcconcl- 
ary_alphabeLs resulting from the sliding of n, mix c1 primary Sl'qurnce 
against the normal sequence. 
This in r ase in s emiLy i not v 'l'Y 


great. 


b. The same is true iJ th primary cneiphcrmcnt i mononlphn,betic 


and ~h e secondary cnciphenncnt is polyalphab 'Lie by tbo method 
desct'lbed. 


c. In general, this 11lso applies Lo other types of polyn.lphnb Lie and 


monoalphabetic combinations. Tho increase in so urity is not very 
great, and is, ind eel, much less than the uniniLiu,tcd su poet . 
. 51.. Combined substitution-transposition in general.- Com- 


~~~at.Ions of substitution 11nd tum positi n me~hods c1u1 ta.ke_ many 
. flore~t forms, and only a few examples can be 1llustraLed herem· It 


~:. posslb~e. of course, to apply su bstitu Lion fi.rst, then transpo. iLion, or 


ansposltJon first, then substitution. The most commonly cncounL- 


c~·od systems, however, 111"0 of the form er typo, that is, sCc~t~2 · 


]u~'thermore, it can be statecl that llS a rule practicn ble systems m 


'~h1eh both processes are combined usc methods that are relatively 
Simple in themselves but are so selected as to produce cryptograms 
of great security us a' result of the combination. 
To give 11 very rough 
analogy · 
. 
. 
. 
l 
n' 
t · 
n JCh more than 
. . · ' lll ccrtam combm11t10ns t 1e eu_ ~ 
IS 1 1 
. 
. 
y 


e~t~l\Tulent to the simple additi n of complex1t1es oE the 01dei X and ' 
gmng X+Y· it is more of tho order XY, or cv n X 
2Y 
2 


• 


. 52· Mono~lphabetic and polyalphabetic substitution ~on;­ 


blned With transposition.- a. A message ma,y u~dergo _.srmt_P e 
mo 
l h 
1 
1 l habctJC su bst1tu 10n 
no a P a betic substitution or comp ex po ya P 
· . · 
Ob- 
and th 
h . 
h 
simple trn.nspos1t10D · 
. 
· e resultino· text passed t roug 
11 
· 
b 
. 
1 ed for the 


Vlously, either st~nclard or nlixed alphabets may e emp oy 
I th 
b · 
· 
· 
. 
·t· 
ph11so A.ny one o 
c 


S~l stltution phase and for th.e tra.nsposl Ion 
. . 1. cl 


sm1 1 
· : 
· d · . · ethod mn.y be app Ie · 
P e vanct10s of geometnc- 
~s1.gn _m siro · le combinn.Li n, using the 


b. As an example, note the followmNgG B~ACH HAS CEASED. 


message ALL ACTION AT LANDI . 
b ·)· 


1 
b t. by m1xed n.lph11 ot · 
st step: sC 1 (mono11lph11 e w, 


Plain: 
ABCDEFGHIJKLMNOPQRSTUVWXY~ 


Cipher: 
TDRAMOBNILPEZYXWVUSQKJHGF 


ONA TLAND INGBE ACHHA SCEAS ED 
Message: ALLAC TI 
A 
Cipher: 
TEETR QIXYT QETYA IYBDM TRNNT SRMTS M 
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zd step: t 
2 (ns pr nrrnng d b two n correspondents): 


TEETRQIX 
(For t,ho in cript,ion; a roctangl of ight columns.) 


yTQETYAI 
~n..r 
(For th t,rnnscri pt,ion; counterclockwise route begi.Jlniug 
YBDMTRL~n 
l 
. I 1 
rsRMTSMA 
ut ower ng 1t; 1nnd comer.) 


'ogram: ANIXI QRTEE TYYTS RMTSM NAYTE QTBDM TR 


ryp~ 
. 


c. A simple s~bt~rfuge often ndopted boiwoen correspondents Js to 
. , tbe su bsLJ t,u t,wn text ba kward to form tho :final cryptogr&Dl 


wn~o 
d 
.. 


( 
0 of simpler v r. c WTLLinCT), 
a ens 
, 
1 
. 
I 
d 
thGd 
d. An oxtr m Y .' nnp 0 nn 
Y t off cti; 
tmn position me l' . 


( I n it,s J)I'O on o 1. n t su pectod) som t;1m s employed ns a P ~ 
w) 
. 
. 
. tl 
. 
0'0 
Jimintu'Y to ~ ~~ b Lltll Ll n. IS 
lat lll wh~ch tho text of a messa,t 1: 
first di vid d In LO )Jill vo ' tho 
cond bomg placed u ndor the firS 
& 


in rail-fence writing. 
Thus: 


P 0 E D 0 0 T F M A K T O 
R C E T P R 0 E B R A I N 


• 
J 
• 
1 
-<~ bo 
Tb 11 encrphermon t )y suup 0 mononlphabetic methods Jlln.-'. 
off cted and tho cipher text tnkon from tho two separate J.:iD~· 
Thus, if 11 standl1l'd nlphabot one letter in advance were used, t 


8 


t,oxt would bo ns f llows: 


Q p F E p p U G N B L U p 
S D F U Q S P F c S B J O 


Cryptogram: QPFEP PUGNB LUPSD FUQSP FCSBJ O 


. 
. . 
f 'h f 
. 
.,.,!Jy 
e. A sunple vanawon o " o orcgomg mctl d h. h · fr·eqtte"' 2 
. 
. 
. 
d. . 
h. 
I 
10 w lC 
IS 
• 
(} 
C'flcctrve wrtJt trll 
Jgiltp 1C IDOt lOds of Sllb l·'t t' 
• tO wtltedi.v 
' J 
S 111 U lOll IS 
• 


undor o' J) and then ncrp 1er tho seis of 1· ux' 
d -r letters 
· all 
b 
tl 
t 
f · 
· "apose 0'0 P 
t!J.e 
gmpluc 
y, t on 
10 so s o J uxiaposcd {j2ffi 1 
Th 
let 
mos age bo WILL RETURN AT ONCE·.,~ otters. 
~s, n dO''(ll 


f 11 
1 
' Iv would be wntte 
as o ows: 


WLRTRAOC 
ILEUNTNE 


Then the following pairs would be en · h 
_ 
tOP' 
00 


0 
, IL 
0 
, etc. Tlw Ior going mcssaO'e Clp .ered: W.Lv, RfJJ, oPel' 


by moans of the Playfair Sq uru·e sho:.n ~nclp.hered in tlus JlliL 
le, 


yi Ids tho following cryptogram: 


111 Figure 39, for exal 
11 
J? 


P~ain text: WL RT RA OC IL EU NT NE 
O!phor: 
VO IR TN LT CQ HN AR RP 
rypiogrnm: VOIRT NLTCQ HNARR p 


1 In preparing the text for enciphermcnt tJ 
·f 
~y~layfair Square is to be used no doubl:ts 


1e clerk must boa . 
· d tJJfl--t 


1 
~ 


' WILL LEAVE ... would b arranged t~~~::bo euciphere~.l11 ;;:: roesstJ- 
15 


WXILXEV 
EWLXLAE 
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f. Naturally the transposition process may involve groups of let- 


ters; a simple type of disarrangement is to reverse the order of the 
letters in 5-letter groups, or within 5-letter groups a tran position 


~uch as 3- 2-1-4-5 or 2-1-5-3-4 (any of 120 different arrangements) 
IS possible. 


g. Columnar transposition methods lend themsolv s especially well 


to. combination with substitution methods. An excellent example 
will be considered under the next section. 
I 53. Polyliteral substitution combined with transposition.- 
n paragraph 29b the essential nature of polylitoral substitution as 
contrasted with monoliteral substitution was discussed. 
Poly literal 


met.hods make use of polypartite alphabets in which the cipher 


?q~uvalents arc composed o£ two or more parts. This being the case 


1 
)\,:~ a ~atma~ ex.tcnsion of cryptographic processes to separate these 
I ts ox to d1stnbute them throughout the cipher text so that the 
fomponents or, so to speak, fractional parts of the cipher equiva- 
ehrnts are thoroughly disarranged and distributed evenly or irregularly 
t oughout the text. 


1 


54· Fractionating systems.-a. A simple example will first be 
s 


10.Wll_· Let the following bipartite cipher alphabet be drawn up by 


~Ssigumg numerical equivalents from 01 to 26 in mixed sequence to 
t 10 letters of the normal sequence. Thus: 


A B C D E F G H I 
J 
K L M 


02 11 06 12 13 05 10 14 09 15 16 17 01 


N 0 P Q R S T U V W X Y Z 
03 18 19 20 08 21 07 04 22 23 24 25 26 


~ach letter is represented by a combination of two digits ; i~ prepar- 
U:g the message for cryptographing, the two digits compns~ng th~ 
Cipher equivalent of a letter are written one below the other, thus. 


Plain text: ONE PLANE REPORTED LOST 
Cipher{0 
1c: 101 11001 01110011 1120 
02c: 833 97233 83988732 7817 


~y recombining the single digits in pairs, reading fr~m horizontal 
hnes, and writing down the pairs in unchanged numencal form, one 
obtains the following: 


10 11 10 01 01 11 00 11 11 20 
83 39 72 33 83 98 87 32 78 17 


b. The foregoing cipher text can be transmitted in 5-figure groups, 


or it can be reconverted into letters by one means or another, but 
some difficulties are encountered in the latte~· case because every. one 
of 100 different pairs of digits has to be proVIded for, thus necess1tn.t- 
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i112; a : . ..-lt•tt r . uh:-titntion, whi h w uld milk·• tho ciph r text twice 
n ln1w u· th ph\in t xt . 


c. ln then P huls tc) foltow pr-; ntly, th' difft uHics are U.\oided 


nwdi!ic-ntit'll. 
This modili ! ti n on ist in the employ- 


l p()l!tfi L < ipht r alphabd.-.:, Lhnt i<>, })Olypartite alphabet~ in 
1 I 1in <'ompmH·nl i-; th' normal equ nee and the cipher 


, ,n p n nt <'nn,i:-;t,.; 1. i n 
'lLUt'n<'( )f •quiY 1len.t 
c mpo ed of all the 


p nn 1 tinn uf :2,: , -1-•••• symbol · tnkcn. in d Jmilc group . 
Fo ... 


11 plc• 
a l>t/id ulj.lllbt t 1 rnmpo:o;rrl. of permutation of fiye digit- 


11 l 1 n 1" o 111 n imt 1' n hl ~.·on trllet d 
~ it>lding a set of 25 equi\a- 


l€'nt 
Pr a :2.· -lt·t t ·: lphn hl't (1 ntHl ,) being usually consiu red a~ one 


lttt••r .• \ lr)id alpiab£1 nf :27 cqui\t\knt.:; cnn h constructed from 
,,[l thl' pt•rmtll 1litHl,., 1>f thl ligits l, ~. ~ tnkcn thrr at a tin1.e; a 
,, tr l'h u '·t r lll\1 t , h ',,. t'l', 1 t n ld d to rc1 re, nt th 27th ele- 


1111 nl ol th' ~ lplt.\h 
lt j, ·nm t•ni nt. o rcpre· nt the part~ O~ • 


hi id t I' i\.\1 11 
,_-mbol· 01c and 
o~C) ih part of it t ifid 


)tli\ nlt•nt, I y thP 
mh •I· 
~· 
·c :uHl lf\. 


d. !'PI ti,l ciplwr all h. h •ts mn~· ht ~yst mati ·all~ -nu.·ed alph 


ho c•d upnn I t'.' \\ •J·l 
:111 I lt.\'phrn" ·. 
.For cxtunpl , not 
h 
t> 


r,un\\ill' hifid alJ>Illl 
b del'i\··l from 
he kcyphra"e ::S::.J."'L - 


1'110. I 
l'Ef)L.\~1: 
X Y L 
0 
P 
H 
I 
C B E D A 


ll 
3 1 
15 21 
2 23 24 25 31 32 33 


.. ! 
F 
G 
Q 
R 
S 
T 
U 
V 
W 
Z 


3-1 . 5 <l 42 43 44 45 51 52 53 54 55 


'I h 
m• 1 I 
ipJ, m. y l ' :1} plit d tt trifid nlphnbct , mpl yiug the 


pt tmttt ti •n 11£ tlt' thr, ,, di·•it-; 1, ~' ntHl '\ tt\kt:n in o-roup~ of thret:". 


'· \•lt• tht• fp\lo 'in hi!id nlphnhll nnd tho xamplc of it- us 
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The bifid elements, 0\ and 02 
0, ar. n w rcr. mh~nP.d ltorizontnlly i.n 


· 
nd the pairs are reconv rL d mto lC'lt<•r quJYulc·nt of IH b 
1 
parrs a 
1 · 
tl 
alphabet which, for the sake of onv ni nc , i. her' UITflll "< 111 
I 


form of a deciphering alphab t: 


11 12 13 14 15 21 22 23 24 25 31 32 33 
M 
A 
N 
U FCTRIGBDE 


34 35 41 42 43 44 45 51 52 53 54 55 
HK 
L 
OPQSVi' XY Z 


Cryptogram: LHLNR QTEQO REAEE DDDA 'J 


f . It will be noted that ther nr four hn j,. 
l~'}l iltYCih, d in 1 ~~~~ 


foregoing enciph rrnC'n : (I) A proc·c• ·s ,,f cl 
ompo. iti n, nul~ tit uti'> 


in ehaructcr, in which C'nrh OD i~ n·pluc·c•cll,y n bipnrtilc 0,., rolltpn .,1 (If 
two parts, 01c and 02c, ac ·ording ton. hi lid ulphuiJ ·t; ('2) u pro'''' 
of 


separation, tra.nsposi~ive .in 
· h m't\~·t~·r, in "hich c•nc·h 0 
1 ~ iH H•prHH I'd 


from the ffc Wlth wln h 1t wu ongmully ac;. orintl'd; (~) : pr 
' f 


recombination, nlso transpositivo in c·hurud' , in "hi<'l1 
.!idt (J1 j 


combined witll a 02o with whic·h it"~~~ llot ori 'inull: 11 
,, ·iut<'d ; und 


finally (4) a proc· .s o( rec'OJJ\jHJsiticm, sui, titutivP in ('] 111111,•tPr, in 
which each new 0 
1c 0 
2o omhinntion i~ gi\ ('Jl n.ll'ttc·r •ulll . tl!'('(IJ'(\in r 1o 


a bifid alphab~~ · In tit 
forC'~oingrxnmplc ( uiHJ\'P), theulphnl' f r 
the recompo 1t10n wns i h sn1n as 1llllt for tlw 1],.1.11111 p11 ition; thi , 
of course, is n o~~ ~~ inlwrc·nt JH•c·p !>it,y rJf lu• y " 111 · t\ 11• <l< oHqJo itioll 
and recompos1L10n alpbahl't' mny lJC 
c·n itl'lv clific·r nt. 
't hi 
i 


shown in the exampl in purngruph .),)d. 
• 


55. Comparison of foregoing fractionating syst m wi h 


certain digraphic systems.-a. Th 
nwthnd <k c·riiH·'l 
uncll'r 


paragraph 54e can be irl n liliecl "illt l'Olll<' of tlu eli 'rnplti 1• 
11 h it tt - 


tion systems discu. ed in .'cction 
ll. 
b. Take the lil ssnge 
( .p~tmgruph !11 nnd l" n Jigh modificution 


in the method of recomlnmug 01• und 0·0 h mndc. 
,·1, t'i!i. ll:, l" 


the first halves and ih s•concl httl rs [ th hifid •qui ·n\ nb f th<' 
plain-text lett rs he om bin •cl in th following lllunu •r, u i11g th 
bifid alphabet of p11.mgruph !i 1t: 


.Y!essage: O!TE PLA E REPORTED LOST 


ON 
EP 
LA 
NE 
RE 
PO 
RT 
ED 
LO 
ST 


4l~L 34=H 4l=L 13=N 23=R 44=Q 22=T 33=E 44=Q 42=0 


z3~R 33=E 12=A 33=E 33=E 32=D 32=D 32=D l2=A. 5?=W 


Cryptogram: LRHEL ANERE QDTDE DQAOW 
If the cryptogram giv n in pnrup;mph 7'>1e \'.<'l'C' plit in t\ 11 )lli<lclk int 
two sections, and the l·tlcrs tttken ullrmutely, th result, woohl .b 
identical with that obtain din lhis subpumgmpb. Th id 'lltificnuon 
referred to in a a bove is JJow to h dcmonstru.t •cl in 
b •lu' . 
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c. Note the 2-aiphn.bet checkerboard shown in Figure 44. 
lf 


~he s.ume message is now enciphered hy its mC'ans, a crypto?rilm 
IdentiCn.l with that obtn.ined in parugrn.ph 55b will b 
obttWled. 


Thus: 


M A N u F ) Message: 
C T R I G 
B D E H K 
ONE PLANE REPORTED 
LOST 


L 0 p Q S 
V W X y z 
Substitution of pairs: 


M C B L V 
A'I' Dow 
N REp X 
U I H Q y 
F G K s z 


ON = LR · 
D 
c 1 


Cryptogram: 


EP 0 = HEc; 
LA I) = LAc; 
RE 0= REc; etc. 


LRHEL ANERE etc· 


NEv = NEc; 


~ 


F IOUJtE 14. 


d. In the exa,m l . 
. 
1 hD,bet -was 


used for the reco p e ~. paragraph 54e, the siune b1fid a p D d of con- 
vmting the corn:positlOn as for the decomposition. 
Jnste s of the 
original bifid al ~n~d 0 10 02o olemon Ls into letters bY 


1110an ci.fica.llY 


drn.wn Up for this l~Cet, SU~p?SO It S cond bifid alphabet sp;}Jt!S: 


ll:::::A 
om positiOn is at hand (soc par. 54/). 


12:::::U 
2l:::::B 
3l=C 
4l==K 
51::::::V 


13:::::T 
22=I 
32=D 
42==!'! 
sz::::::W 


14:::::0 
; 3=L 
33=F 
43==P 
53::::::X 


l5:::::M 
4=E 
34=G 
5.4::::::Y 


The encinh 
25:::::S 
44==Q 
r7 
1:' er:rnent of th 
35=H 
45=R 
55==~ 


Message: ONE 
e message is th 
PLANE REPOR 
en as follows: 


~tvliabctfor d 
TED LOST 
A=l2 
•composition 
. 


B=31 
N=l3 
A.lploabet for recorr;positiOTI 


C=21 
0=42 
l l=A 
34=="G 


D=32 
P==43 
12=U 
35::::::0 


E=33 
Q=44 
l3:::::T 
41::::::1< 


F=l5 
R==23 
l 4:::::o 
42==N 


S=45 
15 
G::::25 
T=22 
2 :::::M 
43::::::P 


H=34 
U--14 
l:::::B 
44::::::Q 
22:::::r 


I-J=24 
V=5l 
23:::::L - J 
45==R 


K=35 
W=52 
24:::::£ 
5l==V 


L=41 
X=53 
25:::s 
52=W 


M=ll 
Y=54 
3l:::c 
53==X 
32::::D 
54=Y 


Z=55 
33::::F 
55=Z 


I 
I 
I 
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Encipherment: 


ON 
EP 
LA 
NE 
RE 
PO 
RT 
ED 
LO 
ST 


4l=K 34=G 4l=K 13=T 23=L 44=:Q. 22=1 33=F 44=Q. 42= 
23=L 33=F l2=U 33=F 33=F 32=0 32=0 32=D l2=U 52= I 


Cryptogram: KLGFK UTFLF Q.DIDF DQ.UNW 


4.:j ~ow encipher the same plain-t xt m •sso.g hy mNuls of th 


f ll p abet chcckcrbourd shown in Figure 45. 
The r sultH nre us 


0 ows: 


Message: ONE PLANE REPORTED LOST . 


M A N U F 
C T R I G 
B DE H K 
L 0 P 0 S 
V W X Y Z 


ABC K V 
U I D N W 
T L F P X 
0 E G Q. Y 
M S H R Z 


A U T 0 M 
B I L E S 
C D F G H 
K N P Q. R 
V W X Y Z 


M C B LV 
AT D 0 W 
N REP X 
UIHQ.Y 
F G K S Z 


J•' IGUHE 45. 


Plaint t 
c· 
ex : 
ON EP LA NE RE PO RT ED LO ST 


IPhcr pail's: KL GF KU TF LF Q.D ID FD QU NW 


Cryptogram: KLGFK UTFLF QDIDF DQ.UNW 


T~c results are identi ul with those obtained und r d abov · 
· i If the successive letters of the cryptogrum of b nb 
nr <'n- 


~lp lered Inonoalphabetically hy means of th J llo' ing u.lpbab t, the 
eslllts again coincide with those obtained under d and e u.bo 


Alplmh t 


C1: ABC DE F G H I - J K L M N 0 P Q R STU V W X Y Z 
C2: U C B D F M S G E H K A T N P Q L R I 0 V W X Y z 


~~·s t cryptogram: LRHEL ANERE QDTDE DQAOW 
Fulal cryptogram: KLGFK UTFLF QDIDF DQUNW 


56. Fractionating systems as forms of combined substitu- 


tion and transposition.- ln studying the various types of cb ket- 
board substitution discussed in Section VIII, it wn.s not n.ppn.rent, and 
no hint wn.s given, that_ these s~stcms combine both substituti~n and 
transposition methods mto n. smgle method. But the analys1S pre- 
sented in pu1·agru.pb 55 shows clen.rly thu.t there is n. kind of trn.ns- 
position involved in checkel'board methods of cryptographing. 


r,AO·ICI!i 0 
II 
6 
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67. Fractionation and recombination within regular 
or 


variable groupings of fractional elements.-a. This method is an 
extension or modification of that illustrated in paragraph 54e. Let 
tho text bo written out in groups of 3, 4, 5, ... letters, as prearranged 
botwoon tho correspondents. Suppose groupings of five letters are 
agreed upon; a bifid alphabet (that in par. 54e) is used for substi tu- 
tion; thus: 


Message: ONEPL ANERE PORTE DLOST 


41344 11323 44223 34442 
23331 23333 32323 21252 


Then, let tho recombinations be effected within the groups hori- 
zontally. Thus, for the first group the recombinations are 41, 34 
42, 33, and 31. 
The entire message is as follows: 


41.34.4 
11.32. 3 44.22.3 34. 44.2 
2.33.31 2.33. 33 
3.23.23 2. 12.52 


Recomposition (using the same bifid alphabet as was used for the 
decontposition) yields the cryptogram: 


LHOEB MDDEE QTERR HQTAW 


b. As indicated, other groupings may be employed. Furthermol:'e 
a difi'erent bifid alphabet for the recomposition may be used than ~a. 
employed for the original substitution or decomposition. It is al~o 
clear that sequences of variable-length groupings may also be e:l:t:l.__ 
ployed, as determined by a subsidiary key. 


c. Trifid alphabets also lend themselves to these methods. Note 


tho following oxnmplo: 


Alphabet jo1· decomposition 
Alphabet jo?' recomposition 


A= 222 
J = 312 
S= 131 
111 = 1 
21l=U 
311= "\T 


B= 322 
K=ll2 
T= 122 
112=K 
212=N 
312= .J 


C= 121 
L= 231 
U= 211 


D= 133 
M= 323 
V= 311 


113=W 
213=H 
313=~ 


121 = C 
221=X 
321=~ 


E= 321 
N= 212 
W= 113 
122= T 
222= A 
322= ~ 


F= 123 
0= 333 
X= 221 
123 = F 
223=Y 
323=~ 


G= 332 
P= 233 
Y= 223 


H= 213 
Q= 331 
Z= L32 


131=S 
231=L 
331= Q 


132=ZA 
232=R 
332= Q 


1 = 111 
R= 232 
? = 313 
133= D 
233=P 
333= Q 


Message: H A S A I R P L A N E RETURNED YET? 


H A S A I 
2 2 1.2 1 
1.2 3 2.1 
3 2.1 2 1 


R PLAN 
2 2 2.2 2 
3.3 3 2.1 
2 3.1 2 2 


ERE T U 
3 2 3.1 2 
2.3 2 2.1 
1 2.1 2 1 


R NED Y 
2 2 3.1 2 
3.1 2 3.2 
2 2.1 3 3 
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Cipher text: 1 XURZAC AYGFT MTBKC YFFAD ZBXF 
Final cryptogram: XURZA CAYGF TMTBK CYFFA DZBXF 
d. Bifid and trifid alphabets may be com bined witlin a 


tern with appropriate groupings, but such ombinations m 
sidered as rather impracticable for military usag . 


58. Fractionation combined with columna r 
tion.-a. An excellent system of com bined 
ub ti 
ti 


sition that has stood the test of practical, war-tin 
to be described. Let a 36-charact r bipartite 
drawn up, and a message enciphered, as follows: 


MONTHS 


W H8Ali9 
I 
LC30UM 
(Key for internal alphabet: HAIL ..- 
L . f- 


N 
B2PYND 
BIA HAPPY LA. TD. 
. 
rt d 


T 
4E5F6G 


E 
7J¢KQR 


R 
STVWXZ 


Message: 


immediately aft r 
a ·h l 


A being follow d by 1, B , 2, 


ADVANCE PROGRESSING SATISFACTORILY OfER 40 
PR S- 


ONERS AND 5-75 MM GUNS CAPTURED. 
SECO! D OBJEC"' ' E 


REACHED AT 5:15 P. M. 
Substitution: 


A 
D v 
A 
N c 
E 
p 
R 
0 
G 


WN NS RN WN NH IO TO NN ES IT T:-' p 
.0 


I 
N 
G s 
A 
T 
I 
s 
F 
A c 
T 
0 


WH NH TS RM WN RO WH RM TT VIN IO RO I"' 
L 
y 
0 
v 
E 
R 
4 
0 ¢ 
p 
R 
I 
s 


IM NT IT RN TO ES TM EN E 
ES . m P. • 
·ili 


E 
R s 
A 
N 
D 
5 
7 
5 
,, 
G 
u 
s 


TO ES RM WN NH NS TN ET 
T 
IS IS TS IH ~iH ,, 


c A 
p 
T u 
R 
E 
D s 
E c 
0 
0 


IO WN NN RO IH ES TO NS R ~ TO IO IT 
B 
J 
E c 
T 
I 
v 
E 
R 
E 
A 
c 


NM EO TO IO RO WH RN TO ES TO 


"T 
• IO 


A 
T 
5 
1 
5 
p 
M 
WN RO TN WT TN NN IS 
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The C1 text is now inscribed in a r cLangle of predetermined dimell- 
sions. 
Transposition rectangle: (Columnar, based on key HAIL 


COLUMBIA HAPPY LAND.) 
HAIL COLUM BI AHAPPYL AND 
8----1-10-12----6-17-13-20-15----5-11----2----9----3-18-19-21-14--4-16--7 
w N N s 
s E s T 
w H R M 
T I 
T R 
R M I 
T 
M T N I 
R 0 I 
H 


s I 
T N 
T 0 w N 
N N N I 


Cryptogram: 


R N w N N H I 
0 T 0 N N 


0 R M R M w H N H T s R 
T T w N I 
0 R 0 I 
T E s 
N T 0 E s T M E N E N N 
N H T 0 E s R M w N N H 
s I s T s I 
H N H R M I 
E s T 0 N s R M T 0 I 
0 


M E 0 T 0 I 
0 R 0 w H R 
I 
0 w M T 0 N s w N R 0 


s 


NEHIM TOION ONOEM NMRSO TTENR OWNIN 
ISTNN OWHWO TSISI OROTN NSEMI STONH 
ENNST WSWTR MRSTN THINW HTOWN SRTIN 
ITWNI HRMRH RONST MRTIH NNIWM WOTST 
OWSWH ESWTT NNMIS ESNOT TRMWN NHETN 
RTTHI SEONS ENNMI HRNRS NHIOR ONRNE 
OTOTM EMWNN OINT 


FIOUHE 46. 


E s I T T 
M w N R 0 


IV 
H I M N 


N E s w H 
N s T N E 


0 w N N N 
I 
T N H N 


N T 0 E s 
T N w T T 


b. One of the important advantao-es of this type of cipher is tl;nt 


it affords accuracy in transmission °since the text is composed 


0 
. a 


l. · d 
1 
d verttca.l 
umte number of letters. In fact, if the horizontu, an 
coordinates of the cipher square aro the sumo letters, then the cryp- 
tographic text is composed of permutatioHs of but six: dillere~t ~otter ' 
thus aiding very matoriully in correct reception. Indeed, It lS e~n 
possible to reconstruct completely a message that has been so bu, ~ 
garbled that only half of it is present. This cipher system was use 
with considerable success by the Gorman Army in 1917- 18, nnd wu 
known to the Allies as tho ADFGVX Cipher because these .wore 
h l 
. 
' 
f 1 
pher 
t e otters used as honzontal and vertical coordinates o t 1° Cl 
square, and consequently the cipher text consisted solely of these 
six letters. 
c. The cipher text of the foregoing message is, of course, t~c~ as 


long as the plain text, but it can be reduced to ex:actly the ongmul 
plain-text length by combining the distributed or transposed O\ 
and 02o elements in pairs, referring to the original (or a differen~) 
polypartite square, and recomposing the pairs into letters. In tl~s 
case, the horizontal and vertical coordinates must be identical m 
order to permit of finding equivalents for all possible pairs. 
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D. CRYPTOGRA PHS AND CIPHER MACHI ES 


S lW'l'ION XII 


Preliminary r 
CRYPTOGRAPHS 


Wh 
emarks 
'''""" . rph" __ .. _ 
- 
. _ _ 
.. . 
""'""'" 
eatstone c· 
-- ------ 
Tl 
C•ph" 
. .. 
.._ .. _ .... _. ___ ...... -.... 59 


1e obsolete U.S -A------ 
- 
- ~--- • - ------- --------------------- -- 
60 


· 
rmy · 
- 
- 
DD. Prelim! 
"Phcr dovloe, ty~;·M~ .. -----·-"" ___ ...... -- 
6J 
P•eccdi 
nary re 
____ .... _ .... --.. --·-- 
62 


ng sect· 
marks - Tl 
. 
syst.ms, but ~ons by no rn~a 
le Clpher systems described in the 


each one p 
rt lS imposs'bl ns exhaust the category of complex 


mspects an~~e~ts innumer~b~ to de~cribe them oJL 
Furthermore, 


to follow t or combinat' 
e possrbilitres for modificatron m minor 


mechanic~ he principle lOU wrth other methods. In the paragraphs 


60. Wh crYPtographs hupon which cer·t.ain of the more simple 


inches in rtstone Cip~ ave been bnsed will be described. 
m Fig""' ~umeter, and c:r · ~. The device is a ll tcle more thn.o. four 
letter·s. I 7 · The di 


1 


. ns>St.s of a dial with two hn.o.ds, M shown 


alphabet' n the outer a rs composed of two independent circles of 
and the~ sequence bciTcle the lotteiO pr·ogress clocl<wise in normal 
have d" . 'making a' t ut th re is an extra character between the Z 


1g1t 
· 
ot 1 f 
inner ci . Is rnscribed . a 0 27 characters. Some of the spaces also 
lllld ar.'·c e the lett . m them, for enciphering number<· In the 
n. deta hlllscribed e"tehis are arranaed in )1lixed alphabetic sequence 


c abl 
1 
er o 
o 
· 
f 
by anoth 
e .cardb 
. 
n a surface whiclr pernnts o or>ISure, or on 


inner 
er CITcle board cnclo which cn.o. be removed llJl.d replaced 
keyw s~quence is 
eanng a difleront sequence· In Figur~ 47 this 


01 FRA.Nc~ systematically mixed sequence derived from the 


' as follows: 


123456 
FRANCE 
BDGHIJ 
KLMOPQ 


F 
S T U V W X 


BKsyR 
YZ 
b. The 
D L T Z A G M U N B 0 V C I P W E J Q X 


and 
· 
two ha d 
· 
IIUnute h 
'n s are pivoted conceotrrcoJIY, "" are the hour 
makes a corn 'j"d' of a clock. Now, in a clock, the minute hand 
of a cornplet P ete revolution, while the hour hand mal<es only M 
ever, is sorn e ~volution; the action in the c>ISe of this device, ho~: 
pendently 


0;7 at different. The Wort hn.o.d is free to move inde- 


the former 
she long one, olthough the motion of the latter affect 


only 26 b · 
~ce the outer circle bas 27 spaces and the innei' 


8 


t 
. 
' Y a sunpl 
h 
· 1 
· 
one 
wn of the 
1 


e mec amca contnvance each complete r 
1 


thus cousin °~~ hand causes the short hn.o.d to make 1)\ revol e;o u- 


g 
e short hand to point one place in ad 


6 
u Ions, 
vance of where 
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lollg bnlldd· 


f the 
1 ntl 
. 
lution ° . eire e · 
d of tho prec dmg revo 
he outel 
bnod JS 


it point d n.L Lh 
n l 
1 ng hand is ov r B of t. f the loPg lutioll• 


F or example, wh ~ t le oR f th inner circle, 1 
tete re"?se plus 


the short h!l n~ pom ts to 
h 
diol making a co~P clocl01fl 


pushed 
lockwlse . around t I e a c~mpleto revolution 
d ore 


the hort hand Wll~ n.!so ma co 
short bUll t tbB 


ono spn.cc' t~HJ S pom Lll1g t 
.} 
l ng hand and the gree tb& ~~cir 


c. To cnCJ pbcr a me age, t_I. 
o 
I t l·s usual to flf· letters, d js 
· · · 1 
twns 
1 o 
1 Jl 
seL to proarnmg d _mltlfi posl .. the outer eire e 
lollg J9 
'sO· 
pluin-LoxL lett r will bo s~ ugh t 


1~ 1 . 
d that the ll'J cloc~ll'l 
. 
. 
th mnor cu·c e, an 
sufl· 
cipher oq Uivnlonts lll 
e 
d'rection, u 
in vu.rin.bly to b 
moved in Lh 
sa.mo 


1 


Fw n& 47. 
o:Nl'flQI 


. 
ND AMM 
directlY 


Suppose the message to be en iphered I S SE . 
til it is 
hnJ'ld 


FORWARD. The long hand is moved cloc]oVISO. un the short 
tbB 


over S on tho outer 
quenco. 
Tho letter to. wluch WU· 
'l'hell. to 
points is the cipher equivalent of S n.nd is wntton d~ tlle Iettel 
f1 


long hand i m.oved clockwise to a position over 
j' 
WJlelllo 


which the short hand points is noted and written do'7the doubQ 
double letter occurs in tho plain text, as in the case 0 
ch ns ' 
M of AMMU.r:-riTION, some infrequently used letter, ~~'tte!'· 
'1'~ 


must be substttuted for the second occurrence of the .. 1 prol11 


. 
. 
tll1 
il 
decipher a mess ago, the hands are returned to theu· uu · se uut 
ranged positions, and then the long hand is moved clock~ is tlJe~l 


tl~e short hand points. to the first cipher letter; the _long h~n ed 1]JlLil 
du·ectly over the plam-text letter. The process IS contlUU 
all the letters have been deciphered. 
· her· 


d. A consideration of the foregoing details .sho:vs that the enclP wing 


ment of a message depends upon a combmatwn of the folio 
variables: 
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(1) The sequence f l tt 
. 
considered tbi 
0 
e ers m the outer circle. 
In the case just 


since it con's' t s sequence must be regarded as a known sequence 


1s s merely £ th 
' 
(2) Th 
0 
e normal alphabet plus one character. 


(3 
) Tl e ~e9-~en~e of letters in the iuner circle. 


le illl tml J uxt 
. . 
(4) Th 
.apos1t10n of the two sequences. 


. 
e exact compos·t· 
f h 
. 
. 
. 
will determin 
h 
. 
1 wn o t e text to be enc1phered, smce this 


to encipher e ~ e number of revolutions of the long hand required 


e. It is ob a. glVen nu_mbcr of letters of the message. 


as well as tVllOt~s that 1f the outer alphabet is made a mixed alphabet, 
le mner b th b . 
d'IT 
made more sec 
' . 0 
emg 
1 erent, the cryptograms will be 


f. The sa 
ure agamst cryptanalysis. 


obtained by me. resul_ts. as are obtained by using the device can be · 
bear in mind ~~ng shdmg _strips of paper, providing the operator will 
to tho loft of th at ever:r: tunc a Ov on the plain component is situated 
one interval toe precedm~ Ol,, he must displace the cipher component 
clockwise m 
the left, 1f the correspondents have agreed upon a 


agreed uponovement of the long hand, or to the right, if they have 


61. Jeffer a counterclockwise movement of the long hand. 


system and ~0~ Cipher.-a. Credit for the invention of the cipher 
the original . eVlce now to be described belongs to Thomas Jefferson/ 
years later (~ventor, although it was independently invented m~ny 
and still later91) by n. French cryptographer, Commfmdant Bazenes, 
Colonel, D. S (1914) by Captain Parker I-Iitt, U. S .. Arn~Y (n?w 
(1901) by B · A:my, Ret.). Because it was first descnbed m pr~t 
based is 
azenes, the principle upon which the cipher system IS 


1.lsually 
f 
· 
· · 1 · 
for the 
1 
re erred to in the literature as the Bazenes prmcip e, 


J 


sa ce of hi . . 
· · h . · 
ailed the 
efferson 
· 
. 
stoncal accuracy, however, 1t IS 
eiem 


0 


b T 
Prmclple. 


d 


: 
he basis of tbi 
. . 
. 
f 
t f 20 (or more if 
es1red) 
· 
s pnn01ple IS the use o· a se 


0 


. 
' 


changed ·mthl.Xed alphabets arranaed in a sequence that ca.nl readtilyf 2b0e 


l 


• 
ese 
b 
. 
b 
. h 
t fa who e se o 
etters w· th 
can e used m the enc1p ermen ° 
b t 
S 


cessive enl . one and the same displacen1ent of the alpdh~ el s. 
utc- 
Clphe. 
d 
'th different 1sp acemen s 


of tho al h 
unents are accomplishe 
WI. 


P abets . 
. ~~· _'Vhereas Jo.IT . 
. 
ted 11 device using a total of .36 


dlflelent 1 1 
Olson conte11lpla 
1 d' l· 
the one Bazenes 


described a p labets mounted on revolvadb ~ t~ ~~arne manner. 
~sed 
only 20 alphabets mounte 
111 
.e 
· 


. 'I he late Joh M 
f . erlY Captain, Military Intelligence Divi- 


~on, U.S. A., d~sco ·Manly, Ph2~ -~ ~;~cription of the device among J fferson's 


F 


apcrs in the L'J verecl, 111 10 
' 
(vol 232, item 41575, Jefferson'.· Papers). 


or 


1 


1 rary of Congress 
· 
. 
. 
. 
a P lotogral)h' 
. 
f t his historically mterestmg 1tem, . ee pp. 189- 91 


of A ·t · 
1e reproductJOn o 
· 
. 
d 
r 
. 


1 tcles on 


0 
1 


d c,-y1,to:nalysl:s Repl'tnte 
FTom The S1 gnal CoTps 


Bull · 
1·yptograp ty an 
. 
. 
ettn, Signal Security Service Publication, OCS1gO, Washmgton, 1942. 
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. 
. ce type M-94.--il· 


62. The obsolete. U. S. Army cipher de"? . '1 nsing 25 mued 
· 
fT 
nnmP ~ · 
Tills cryptograph is base~ ! upon .tho .Jr 
rson P r'd 1 employed in our 


al~~abets on. small alullllllum h~ J .' 
lL 'vos ''.1 


0[bor U. S. scn~ccs 


rnihtary sorv1co and to a more lnmted extent ID 
t 
deVJ'co 
b t ·or 
· 
until v ry recently, when it was super cl ~ by .; 
cryptogmph arc 


b. Because the basic principles involved m sue 1 11 
odorn cryptog- 


extrem ly important and have a dir ct b o.ring ~poD 7bod of emplot 
raphy, a detail d dcscripLion of Lhis device nnd 1ts me 
ment will be pre ent<'d in LIH' next section. 
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SEC'l'ION XIII 


THE OBSOLETE U.S. ARMY CIPHER DEVICE, TYPE M- 94 


Issue to students___ __ 
Paragraph 


General dcseripti on 
---------- --- ---------------------------------- 
63 


~:~:~l:c\Yl.Jfl~s~·~·kcyt. aJ~d -l;l~;;idi~~ -f~~-cl~~~~~cs ~ller;i~~~== = =---------------- 
6645 
"uc ·,Jons for 
· · 
· 
-------------- 
Cryptograpbin 
scttmg the dev1ce to a predetermined key__ __ __ __ 
66 


C . 
g a message 
1 yptographing ab b . . .. - 
------- 
-- --- 
--------- _ 67 


Decryptographin<g a 1 evJal.lons, punctuation signs, and number ____ _ _ _ _ _ _ _ _ 68 


· 
message 
63 
- 
- 
- --- - - --- 
----- 
69 


· Issue to Stud 
emolled in th 
ents.- When a student who has been regularly 
e Anny E t 
· 
b 
. 
. 
. 
reaches th · 
. 
. 
x enswn su course to which tlus text apphes 
. . 
ls pom t m hi 
t d. 
f 
. 
. 
ranly issued to hi 
. .s s. u. 1 s, one ~ the~e deVIces w1ll be. tempo- 


d_eoling with it. ;r; fOl usc :n conne~t1~n With the les.son ass1~nment 
twns for its 
~he follo>vmg descnptwn of the deVIce and mstruc- 


coincid, witlusel WJll be ~le~r when he has the device in hand. They 
litel'ature ap 1; .te descnptwn and instructions employed in training 
64. G 
P cable when the device was in effect. 


eneral d 
. 
. 
alloy and c 
. escnptwn.- a. Tl1c device is made of aluminum 


(1) A 
onsists of the followin(J' parts: 


central I ,+ 
b 
ing should . 


1 


8 t~Jt, the left end of which terminates with a project- 
(2) A se~ 
1 '; le right end of which is thl'eaded; 


stamped a d~ 25 alphabet disk , on the rim of each of which there is 


(.3) A guide-erent, .complet~l~ disarranged alphabet; 
. 


which there 
.rV:le d~sk, eons1stmg of a blank or unlettered-disk from 


(4) A 


1 
, 
~ 1 ?Jects a guide rule; 
which a. eta~mng plate, consistino- of u. thin disk upon one surface of 


le stamp d h 
l::> 
• 
d · · · 
(5) A/, 
e t e name and type number of the eVIce, 


b E cnurled thumb nut 
· 
~ ach d' 
· 
. 
. 
the c t 
lsk has a hole at the center suitable for mountmg 1t upon 
bacl en ral shaft, lli)On which the disk can be revolved forward or 
cward 
Th 
. 
. 
. d 
. 
circle f · 
e left face of each alphabet disk 1s proVIde w1th a 


one 
~ 26 equidistant slots. the rio·ht face is cupped, and carries at 


gu 
.dPOlllt on the inside rim ~f tlus ~up a small projecting lug. The 


1 e-rule d' 1 
· 
bl 
upon tb . ls.c also canies such a lug. When t~e d1sks are assem eel 
the ad' e shaf~, the lug on each disk engage.s With one of t~e slots on 
:]acent disk on the rio·ht and thus the disks can be held m engage- 


mthent In any desired relative positions by screwing down the knurled 


.umb n t 
· 
1 · h · · 
t d b t 
1 
last al 
u agamst the reliaining plate, w uc 1s mser e 
e ween t 1e 


phabet disk and the nut. 


1 


c. When the thumb nut and tho retaining plate are removed and the 


a:habe~ disks are taken off the shaft, it will be ~oted t~at each al- 
p abet Is stamped on its inside or cup surface With an mdentifyin(J' 
;ymbol con,isting of a number that;, above the central hole and : 
etter that is below it. The numbers run from 1 to 25, inclusive, the 


86 
loyed to 
bols are eJUP 


letters from B to Z, inclusive. These sym di l·s are to be asseJll- 
designate the sequence in which the alphabet 
s ~ ·apbing 1nessage~, 


bled upon the shaft in eryptographing or decrypto:I be used for ~,]JJ 
as described in parao-raph 66. 
Either symbol m nlyy the nuinenonl 


"' 
f 
h 
·esent o 
pm·pose (as prearranged) but or t e P1 
. 


identifying symbols will be so used. 
h nges tnerelD·~a. 


65. Necessity for key and providing for c fa lphabet disks cnu 
en co o o, 
· t ene11lY 
Messages cryptographed by the same soqu 
. d 
d e!ficten 
. l 
. 
. 
l . 
b 
ll oi·garuzo an 
. . l)osstb e 
remam secure agamst so utwn y a we - 
. 
It IS un 


cryptanalytic section for only a r lnti vely short tuned. 
pon a nt~Illbel' 
. 
I t' 
depen s u 
·-·""urn 
to sta~o exactly how long, bec~u e s~ . u wn 
d la.ce th~ JUl!W" jt 


of vanable factors· a conservative estunate woul PF 
tl··s reason 


• 
• 
' 
• 
0 
• 
~ or 
J_L.L 
h d 
at SL"< hours the max:unum at two or till ee days. 
d the met 0 


. 
' 
. 
. 
t time u,n 
d 
Jl 


1.s nocessar~ ~o chan?e ~he ~equence from time 0 
ust be agree upo e 


for determmmg· or mdicatmg the new sequence m 
to use tb 
. 
ll 
ho are 
m advance and thoroughly understood by a 
w 


instrument. 
bled upon t~e 


b. The sequence in which the alphabet disks a,re assen 
1 


11 change J.ll 


shaft constitutes the key in this cipher syste1n . . w::~d the e1Cac: 
key is to take place, exactly what tho now key will 
·mined bY tb 


moment that it is to supersede the old keY: will b~ do~~nu,l 0peratio!l 
proper commander and will be commurucu,ted 1n Slo 
instructions. 
0 
to a pre· 


66. Detailed instructions for setting the d~Vl~e bu,sed upoJJ. 


determined key.-a. The method prescribed herem IS 
onstitut- 
. 
£ 
b&SC 
a lceyword or lceyphrase from which the sequence o uUln 
bt ;,,8d b1 
. 
b o a ..... 
mg t~e key _for assembling _the alphabet disks ca~ e for eD1~loy· 
followmg a srmple, standard1zed procedure. The 1 easo~ 
t "'1111, lt 


ing s_uch a procedure is that it makes it possible to d.erlvoJJlicult to 
relatively long sequence of nmnbors (which would b e 
ber) and 


remem~e~·) from a word ~r phrase <:~rluch is eas_y to ~-eme~~nn upo~ 
thus eliminates the necess1ty of carrymg tho key 1ll wntte~ f 
nulll' 


the person. It is this basic keyword or keypru·ase which IS. coJXJJ 'fhe 
cated throughout the command in signal operation instructiOns. 1 ey· 
exact method of deriving the numerical key sequence from the ' 
word or keyph:rase is given step by step in b below. 
. 
:NESE 


b. Assume that the k~y phmse so co:nmunicated lS c:s:r ed in 


LA:U~DRY. The followmg are the letailed steps to bo folloW 
donvmg the numerical key sequence: 
· 


(1) A sot of rows of cross-section squares, 25 squares in each roW, l S 


prepared. (Prepared sheets of X-inch squares are suitable.) 
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. (2) In the top row the 
. 
senes of n 
b 
1 2 
mserted. Thus: 
lUll ers 
' 
' 3' . . . 25 are 


- 
1 2 3 4 5 6 7 
- - - 
8 9 10 11 12 13 14 15 16 17 18 19 
- - - - 
20 21 22 23 24 25 
- 
- 
- 
- 
- - 
- - 
- 
- 
- 
- - - - - - - - - - - - - - - 
- - 
- 
- - 
- 
- - - - 


---.:.__ 


(3 B 
h . ) eguunng under the numb . 1 th 
. 
p rase are written in t 
ei 
' 
e successrve letters of tho key 


number·s. Thus: 
he second row of squares, under the successive 


--.---.-,--.,..__ __ 
~~ 3 4 5 6 7T~ 
8 ~0~:-::T:I~~.,..---,---.--;-.-.-----,-~­ 
c H - 
9 10 1112 131415 16 17 18 19 20 21 22 23 24 25 


INESELAUNDRY 
------- 


·---- 
(4) The ~k=ey=p~m-!..·a-sLe _J_ 
. __i__j__LLl__L_L·L·j_l_j_j_j_LU_I 


under the nulnber 
rs ex.tendod by repetrtwn until there is a letter 
25' mn1nng a lcey sequence of 25 letters. 1 Thus: 


~--~~~~~~,-,-.-.-.-.-~~~~- 
c ;r- ----~~ 
101112131415 161718 1920 2122232425 


---~~~~~~~~~~~~ HrNEsE1AuN 
---------- 
·-'---'--'---'-- 


.. (5) The let~te~rs-o'-f--L_..i_L_L_L__j__L_l_jL_l_l__j_ _ _LU~~_Lj 
from left to l'i ht . the key sequo~ce are now t? be nu~bered serially 
letter occupi g. m accordance With the relatrve posrtwn that each 


~rs t in the 


0 


~- m the ordinary alphabet. Since the letter A comes 


illustrative ~ mary alphabet, and since this letter occurs twice in the 


~ppearance 0;~ ~eque_nce , the number 1 is written . und~r the nl'st 
rts second 
rn this sequence, and the number 2 1s wntten under 


appearance 
Tl 


I ~ . 
1 US: 


1 2 3 4 
~Hr~~~~~~ 1olll213141516 TI1B192D2122~~25 
--- 
E S E L A U N D R y C H I 
N E S E L A U N 
--- - 
- - - --- 
- 
- 
- 
- 
- - - - - - - - - 


.........,_'--'-- 
1 
2 


(6) 1'he 
. 
is carefull next l~tter in the ordina.ry ~lphabet IS B. Th~ key s~quence 
does 
_ Y exalnlned to see if it cont111ns the letter B. Smce tlus letter 


to . no~ appear in the illustrative key sequence, the latter is examined 
~t 
contains the letter C. This letter occurs twice in the 


1lf the J· · 
. 
. 
. . 
. 
after th 
2 
'ey eonststs of a word or phrase contammg mote than 25 letters, those 
e 5th letter are merely omitted. 


illustrative key sequence and the fu·st C, therefore, is assigned the 
number 3, the second C the number 4. Thus: 
,-- 


1 2 3 4 5 6 7 8 9 10 11 r 


14 15 16 17 18 19 20 21 22 23 2425 
-- 
------ 
U N 
C H I N E S E L A u N 
R y c H I N E s E L A -- 
------ 
2 
3 
1 
4 
- 


. 
. 
. D 
bich bemg 
(7) Tho next letter m the ordinary alphabet IS 
, w 
' 
. 
. 
b . and so on. 
pre ·ent in tlw key sequence, IS ass1gnedthe next num el, 
. ed a 


Thus, the process is continued until each Jetter 1Jas been assiglnol' a 
t to over o , 
number. Tbe work must be done carefully so as no 
rk it 


single Jetter. II an error is mndo iu the eu.rly stages of ~h~ wonJ·~ful 
necessitates starting afresh. The op rator should be especla Y ~jnnry 
with the letters which immediately follow one anotl1er m the 01 ch ns 
1 1 
. 
l 1 
. 
d order su 
a p Jabot but are present m t 1e cey seq uenco mrevorso . 
'h cases 
ED, FE, ON, and so on. lt is easy to make a mistake _111 sue. verse 
and to assign these letters numbers in a sequence that IS the 10 


of what it should be. 
d ·t tbe 


(8) When the nurnbe1ing process has been completed an. ~etter 


work has boon correctly performed, it will be found that evel~·entest 
of the key sequence has a number under it, and that t~e g diate 
number that appears is 25. If this is not the case, it is an u:rune J)led 
· 
be assu 
Signal that an error has been made. It cannot, howe~er, 
o-rentest 


that so long as every letter has a number under it, With tho o . tho 
number 25, this is immediate and concl11si.vo proof of acc,,racY 


1~t if 


Work. The operator should invariably check his work; bett~r ~ )~ey 


~wo clerks are availabl~ each one should derive the numerlC:rison. 
mdependently and the fmal results should be checked by ~om~ 
· crip- 


. (9) The keyphrase selected as an example in the foregoll1g 
05 


t1on yields the following numerical key: 


1 2 3 4 5 6 7 8 9 10 1112131415161718 1 920212223 24~ 
- ------------- 
----N 
CHINESELAUNDRY CHINES ELA 0 _ 


31012 16 6 21 7 141 23 17 5 20!25 4 1113 18 8 22 9 i5 2 ~ 


\10) It is this sequence of numbers which indicates the orde\:e 


which the successive alphabet disks aro to be assembled upon 
shaft from left to right. Thus, according to tl1e foregoing key se~uencef 
alphabet disk No. 3 comes fu·st, that is irmnediately to the nght 0 


the guide-1·ule disk; alphabet disk No. 10 comes next, and so 0~~ 
Alphabet disk No. 19 is the last in this particular key and after 1 
has been placed on the shaft, the retaining plate and thumb nut are 
added and tho latter screwed down a distance sufficient to keep the 
asselDbly together and yet permit of revolving individual disks freely 
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upon the shaft. The instrument is now ready for usc in either crypto- 
graphing or dccryptographing messages . 
. 67. Cryptographing a message.-8uppose tho following mes age 
1s to be enciphered with the key derived in paragraph 66: 


CO 3D INF 


HAVE JUST REACHED EASTERN EDGE 
OF WOODS ALONG 


552-592 ROAD. 
WILL REMAIN IN OBSERVATION. 


CO 2D BN 
a. The message is written down on the work sheet underneath the 


~ey ~ lines of 25 letters each. Space is loft under each line for the 
~se~"tlOn of cipher letters. (For procedure in connection with abbrc- 
TVJ.ations and numbers appearing in the text of messages, see par. 68.) 
hus: 
~-~~~~~~~~~-.,-,-~-,~~ 
_ _:_~ 4 5 6 7 8 9 10111213141516171819202122232425 
~~ri~i~i~~i~~~7~~~~~~~~~~ 
310 
~16 ;~~14~23n~W25~111318~~~ 15~U 19 


~~THIRDINFHAVEJUSTREACHED 
--------------------- 
--- 
---- 
------------------ 
--- 
--- 


~~~~~RiE~G~OFWO ODSALON~~~ 
- ---------- 
------------ - - - ---------- 
---- 
----- 
VEF ----- - ------- 
INETWOR 
--~ ~VETWODASHFIVE~------- 
--------1------ 
----------------1----t----- 
--- 
--- 
----- T I 0 
0 ------ --------- SERVA 
-~~!ILLREMAIN~~~~~------- 
--·------- 


---~------- - ---~-- 
- - - --- 
--- 
- - - 
~~oi£co~DBN-- 
--- 
------------ - ·- - 
------- 
~LJ[~~~I_l_LJ-!_l~l~ft~o~n~e~b~y~on:e:..~t~b:e~fi~I~'St25 
b B 
n the s 111 
, 
• 
t l 
. 
y revolving the disks upo 
f 
a continuous honzon a row 
lette 
f 
li 
d to orm 
f h 
lind 
rs o the message are a gn~ ht along the outsid~ o t e cy 
er. 


of letters reading from left to ug 
ient in markmg the row upon 
Th 
. 
d very conven 
f 


~ gulde-rule will be foun . 
d thus relieving the eyes o unneces- 
Which the letters are being alig~ ' e of making errors. After all 25 
sar:y strain and reducing the c anc 
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lctLors ],n,vo been nligncd1 tho a sembly is locked in position so tb 
no disk cnn become displaced accidentally in fUTther manipulation 
the cylinder. The TOW of letters is immediately checked to make .sute t. 
no displacement has occurred among thejiTstfew disks while man~pulat1. 


the last j ew. 
c. The outside of the cylinder now presents a series of ~6 ro:vs ' 
lcLLcrs 


1 


of which 24 rows are fully visible th other two belllg hidde 


or partially obscured by the guide-rule. 


1 
One of the 24 visible rows ; 


tho plain-text row that has just been set up, and the other 23 rows . 
cipher-text rows any one of which may be selected to reptesent the pia~ 
text row. 
Ono of these cipher-text rows is selected at ri\Jldonlllnd t. 


loLLcrs composing this row are written undernea.th tho row of .pln~ 
text lcLtcrs on the work sheet. Thus supposinO' the row begi.nJU.ll 
1 
o 
· 
-=11 ·ead 


L YEUJ ... 


1 has been selected, the first cipher line W.IJ..l 


1 


follows: 


1 2 3 4 5 6 7 8 9 10111213141516171819 20 2122 ~~ 


2 


----- - 
UNDRY-c-;-r-;"Es'i"L ~~ N 
C H I N E S E L A 
------ 
2317 5 2025 4n13 18s22 


1 
915 2 ~ 


1 


3 101216 6 21 7 14 1 
====== 
F H A v E J u s T R E A c-'H£ o 
C 0 T H I R D I N 


9 
= 


------ 
PQBFYN_E __ 
c _N"-;?70~ 
L Y E U J D Ji Ni Yj 


It · 
t 
to which 
. IS no necessary to make any record on the work sheet as 
nor 


~lp.her-text row (a~ov? or below the pla.in-text row) was selected.' l er 
IS It necessary to mclicate it in any manner whatever in the clP J 


message. 


d. The thumb nut is loosened but not removed froJll the shaf~ 


The next ~5letters of the mcs ag~ are aligned the thuJllb nut screwe_ 
down agarnst th~ retaining plate, the leLt ;s in the alignJ11en~ :~~ 
: ooked, and agam ~ny one of t.ho 23 visible cipher-taxt ro"'' " .'the 
. ehone used to encipher the first line is selected at ranclorn for d . 
Clp er text 
The 1 tt . · 


1 


• 
d 
n n!l- 
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th 
· . 
0 
CIS rn the row selected are written oW 
_ 


e. second line o£ plain-text letters on the work sheet. Thus, supt 


posmg the row beginning KZBYJ 
1 
d th work sllee 


now appears as follows: 
· · · 1 was se ecte 


1 
e 
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1 2 3 4 5 6 7 8 9 10 11 
-I-1-- 
12 13 14,15 16 17 18 19 20 21 22 23 24 25 


C H I N E s E L A u N D R y c H I N E s E L A u N 
--- - - - - - - 
- 
- - - 
- 
- - 
- 
- - 
- - - 
- 
- 
- 
3 10 12 16 6 21 7 14 1 23 17 5 20 25 4 11 13 18 8 22 9 15 2 24 19 
== - - - - 
- - - 
c 0 T H I R D I N F H A v E J u s T R E A c H E D 
- - - - - - - - 
- - - 
- 
- - - 
- 
- - - - - - - - - 
L y E u J D J N y p Q B F y N E c N H p F A G p G 


1- 


- - - - - - - - - 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- - - 
- - - 
E A s T E R N E D G E 0 F w 0 0 D s A L 0 N G F I 
- - - - - - - - - 
K z B y J I A H N s R A N D J M E F s y R I T s N 


f e. This process is continued in similar manner with tho third and 
ourth li 
f 1 
. 
. 
nes o tle plam-text message. It should neve1· be made a 


practtce to "javo1·", that is, frequently to select a particular cipher-text 
row .above 01· below the plain-text row. 
As irregular a selection as 


posslbl~ should be made, and the selection of the cipher-text row 


~n.tnedlately above the plain-text row or immediately below the lower 
e. ge of the guide rule should be avoided. Supposing the e instruc- 


t~ns.to have been followed and that there has been selected :for the 
t e Clpher-text row representing the third plain-text line of the mes- 
sage the row beginning· RAMTF . . . and for that representing the 
fumfuli 
' 
d 
ne, the one beginning PJNSY . . . , the message now stan s 


as follows: 
·-1 2 3 4 5 6 7 8 9 10 11121314151617 1819 2021 22 23[24 25 
c 
-------------- 
H I N E S E L A U N D R Y C H I N E S E L A U N 


3 
-------------- 
22 9 15 2 24 19 
10 12 16 6 21 7 14 1 2317 5 20 25 4 1113 18 8 
= = 
== == == 
= H I R D I N F H A V E J U S 
H E D 
c 0 'r 
·r R E A c 


L y uJoJNYPQBFYNEc N H p F A G p G 
E ------------- - - 
- - - - - - - 
- 
- - - - - 
- - - - - 
- - - - - - - 
A L 0 N G F I 
E A s T E R N E D G E 0 F w 0 0 D s 


J M E F s y R I T s N 
K z B y J I A H N s R A N D 


- - - - - - - - - 
- - - - 
- 
- - - 
N E T w 0 R 
- - - - - - - - 
F I v E N I 
v E F I v E T w 0 D A s H 
c s H c s p M X H T E X G M 
R A M T F 0 M 0 K E N - - - - 
- - - 
- - - - - - - 
- - - - - - - - - - - - - 
- 
- - - - - 
v A T I 0 
- - 
- - - - 
M A I N I N 0 B s E R 


0 A D w I L L R E 
w u c H y F H E y T B G p y K G M G 


p J N s y v A 


f Th 
. left only 11 letters to be enciphered, not enough to 
. 
ere a1e 
. 
. 
make a complete row of 25 letters. 
This, however, makes no d1ffer- 
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. 
1 
1' 11 orl nn d n, cipher- 
ence m procedme · th so 11 loLL rs are more y n 1g 
. . 


' 
. 
th row begmrung 
text row is selected to represent them. Supposmg 
e 
. 


URZGH 
is selected the moss1we now stands as follows: 
I 
I 
'b 


112 3 4 5 6 7 8 9 10 1112 131415161718 19 20 21 22 23 24 25 
--- - - - --- - - - - 
- 
- 
- - - - - - 
L A u N 
c H I 
N E s E L A u N D R y c H I N E s E - - -- 
- - 
24 19 
18 8 22 9 15 2 
3 10 12 16 6 21 7 14 1 23 17 5 20 25 4 11 13 
== 
= = = 


T R E A c H E D 
c 0 T H I R D I N F H A v E J u s 
-- 
- - - - 
- - -- 
p F A G p G 
L y E u J D J N y p Q B F y N E c N H 
- 1- 
- - - - - - 
- 
- - - - - 
- 
- 
- 
- - - - 
- - - - 
F I 
- - - - - - 
- - - - 
- 
- 
- - - - - 
0 N G 
E A s T E R N E D G E 0 F w 0 0 D s A L 


y R I T s N 
K z B y J I A H N s R A N D J M E F s 
- - - - 
- 
- 
- - - - - - - 
- - 
- --- 
- - 
- - - - - 
- - - - - - 
- - 
- 
- 
- - - - 
T w 0 R 
v E F I v E T w 0 D A s H F I v E N I N E 
-- 


T E X G M 
R A 
T 
M X H 
M 
F 0 M 0 K E N c s H c s p 
- --- 
- - - 
- 
- - - -- 
- - - - - -- 
- - - 
- 
- - 
---- 
- --- T I 0 
- --- - - - - - - - - - 
- 
- - - - - 
A 
0 A D w I 
L L R E M A I N I 
N 0 B s E R v -- 


K G M G 
p J N s y v A w u c H y F H E y T B G p y -- 
- 
- 
- 
- 
- 
- 
- 
- 
- --- 
--- 
- - 
- - - 
- - - 
- - - - 
- - - 
- 
- - - - - - 
N c 0 s E c 0 N D B N 
---- 
- - - - - - - - - 
- - -- 
- --- 
- 
- - - 
u R z G H E J 
Q s M D 
---- 
- - --- - -- 
- - -- 
-- ~------ - 
~ 


for.Jll in 
g. The cipher text is now to be copied on tho message 


5-let'l;er groups. It is as follows: 


LYEUJ DJNYP QBFYN ECNHP FAGPG 
KZBYJ IAHNS RANDJ MEFSY RITSN 
RAMTF OMOKE NCSHC SPMXH TEXGM 
PJNSY VAWUC HYFHE YTBGP YKGMG 
URZGH EJ QSM D 
lete 


h Th 1 
· 
t a, col11P 
· 
e ast group o£ the c1pher message is, however, no 
a1'e not 


group of 5 letters. It is made so by adding four X's. Theset cipher 
to be cryptographed; they are added merely to complete the la.s 
group. The final message becomes as shown below: 


LYEUJ DJNYP QBFYN ECNHP FAGPG 
KZBYJ IAHNS RANDJ MEFSY RITSN 
RAMTF OMOKE NCSHC SPMXH TEXGM 
PJNSY VAWUC HYFHE YTBGP YKGMG 
URZGH EJQSM DXXXX 
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The message as it now reads is but one of many different forms in 
which this same message could appear externally, depending on 


~xactly which of the available cipher-text rows is selected for each 
line of the enciphorment. 


68. Cryptographing abbreviations, punctuation signs, and 


numb~rs.-a . Authorized abbreviations appearing in the origi- 
nal pl~-text message may be enciphered as abbreviations with- 
out penods. 
Examples: Am Tn=AMTN; E. V. Brown Sch= 


EVBROWNSCH . 
. b. Normally, the writer of a message spells out the punctuation 
signs he wishes transmittocl as for example, STOP, COMMA, 
COLON 
. 
' 
' 
. 
· 
' etc. If a message contains punctuatiOn s1gns not so spelled 


out.' the message-center chief must indicate whether they are to be 
Omitted or sp ll d 
. 
. 
e e out and transnntted . 


. 0•. Cardinal and ordinal numbers when spelled out in letters in the 


ongmal plain-text message are always enciphered exactly as spelled. 
d. Card· 1 
· 
· 
h 
· · 1 
· 
ma numbers when expressed m figures m t e ongma 


plam-text :message must always be spelled out, digit by digit, in 
cryptograpbin g. 
Examples: 


4=FOUR 
40=FOURZERO (and not FORTY) 
400=FOUR ZERO ZERO (and not FOUR HUNDRED) 


450 7- 
455=FODRFIVEFIVE 
~ VEN- 


. 7 58·8 = FOURFIVEZEROPOINTSEVENDASIISE 
FIVEEIGHTPOINTEIGHT 


12- 01 


2005= TWOZEROZEROFIVE 


5:i5 a. :tn.. = ONETWOZEROONEAM 


p. :tn.. = FIVEONEFlVEPM 


e 0 di 
lot1. when expressed 
· 
r nal 
· al 
mber 
u, 
in fi 
. 
numbers above the ordin nu 
t o-raphod ;merely as 


d .. gules followed by "d" or "th "' aro cryp"o.,h " The omission 
Igits spelled 
. 
. 
he "d" or t . 
. . 
~ 
of the "d" 
out, Without addipg t 
nfusion or Dmbigmty. Ex- 


am l . 
or the "th" will cause no coT -SEVENTHPAOKTN; 


11 Pes. 3d Bn= THIRDBN; 7th Pack n-FOURZEROTHREE- 
A~; 
Regt= ONEONEREGT; 403d Am Tn 
69 ~ 
_ 
Knowing the keyword or 


k 
·lu ecryptographing a messagel. 
ad. as described under para- 
eyp ·as 
h 
· deve ope 
· 
. h 
e, t e numerical key IS 
eli ks is assembled accordmgly. 


~:p 66, and the sot of alphabet d . s written down in lines of 25 


1 t e message to be decryptograpifhe 
ail 


1 
~ able space being left under 
e ters 
0 
. 
r 
av 
' 
. 
. 


h 


~ 
n cross-sectiOn pape ' 1 . text letters. Usmg the Cipher 
eac 
line for the insertion of P am- 


58!)40ri 0 -•l ·l - 
7 
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. 
under the koy in th~ 
. h 67 h' rt up pears 
messug given under pnrugHLP 
- . 


following form: 
- 
92021 
22'232425 


·~~~~----.-~~~~~~1l-4i!I151617181 ---~~~ 
1 2 3 4 5 6 7 8 9 10111213 -----E s E LA u N 


_ 
. 
-1-- 
--- 
y c H I N ----r--- 


C H I 
N E S E L ~ 
U . N ~ R 
. - 
13ls S 22 9 15 2 24~ 


· -- 
- 
5 2025 4 ll 
-=-~r- 
G 
3 10 12 16 6 21 '!._ 14 ~ 
231 ~ I= 
~~= = c N H p F A G .:_1- 
====i==--- 
F y N E 
__ I-l- 


L ~~~~~~~~_:__ Q !:._______ 
--1-1- 


- 
-- 
-- 
------------~---- 
----1--.-- 


- 
-- - 
R 1 T S N 
-- 
sY 
H- 
----- 
NDJMEF 
--- 


K z B y J I 
A H N S R A ---- 
-1-'- 
--------- 
------ 
------------- 
---~-~-- 
--- 
--- 
EX G M 
--- 
- 
M X H T _,_ -- 


R A M TFOMOK E N c s ~ c _:;_..::.____ 
--- 
-------- -:~=-----::::::::::::,., 


--- 
B G p y K -- 
1-- 
- 
T 
- 


p J N S Y V A W U C H Y !_~~_:_ --- --- 
--------- 
-- 
-- 
-- 
-- 
-------------- 
--- 
-- 
-- 
-- 
-- 
-------------- 
- 
-- 
-- 
URZGHEJQSMD 
---- 
---------------- 
----- 
---- 
~ 
---------------- 
~~ 


~_.1_.1-...-!-...-!-...-!-...-!Uc._L._LLL_.L-1-'---~!..-- 
n the device, 


. ·o sot up .o 
above the 
b The :fu·st 25 letters of the cryptogrum aJ 
· ht Just 
the 


· 
f to r1g ' . 
down 
the letters being aligned in a row from ~c. t b 
scrowl.ng 
Jnvnrd, 


guide-rule. Fixing the disks in this posrtwn r ·wnrd or bi\.C e row· 
thumb nut, tho whole cylinder is turned slowly, 01 
008 of tbes ·icrbt 
h 
£ l 
. 
. cd 
l ft to I o 
. 
and eac row o 
etters 1s carefully cxu.nun 
· 
frorn e 
·pher 


and on_ly one will rea~ inte~gibly all th_e way acr~s~be first ZS ec~vork 
That 1s the row wh1ch giVes the phun text fo . lace on tb 
letters. These letters nrc inserted in their proper P 
sheet, giving the following: 
.,--,::-::~' 


~-~~~~-.-.-.-.-.-.~~~--~-.---~ 21222 --- 
~~~~~~'!._~~10lll213141516fll8 ~~;~;u~ 
CHINESELAUNDRYCHINES _-- ~~ 
-------------------- 
15 2 
-- 


310121662171412317520254lll318822 ~~G~ G 
LYEUJDJNYPQBFYNECNHPF __ - ; 
co _T"Hr"Ro!"NF""HJ:v"E"Ju~ 
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c. The thumb nut is th l l 
~et up, the asscmbl is ~ 0_ 1 ~oscned'. t~ c next 25 cipher letters arc 
1s slowly revolved Ya locl'-od 1~to pos1t10n, again the whole cylinder 
are written d 
~ 
nd .the plam-t xt row of letters found. 
These 


· h 
own m thmr 
· 
. 1 
· 
· 
IVlt . the rest of th 
. 
P10PC1 P ace and the process 1s contmued 


pleLely decrypt 
0 crphcr letters until Lhc message has been com- 


d. In th 
ographod. 
f 
e case of a 
. 
orm a complet 
. crypto.~ram tho lust few letters of which do not 
out the plain-te:tset of 25, J( any difficulty is experienced in picking 
sage should . 
row, tho context of the precedin(J' part of the mcs- 


b 


. 
grve a go d l 
. "' 
. 
a ove, rt should b . 0 . c uo. 
In the case of the illustraL1ve message 


a~·e not to to be d 0 realized that thc_last fom·letters of the cryptogram 
Clyptographin . . ecryptographed, smce they were merely added after 
group of five lg to make the last group of the cryptogram a complete 
e. The pl . etters. They are omitted from the work.shcet. 


am-t t 
code clerk ma· 0~ messa~o is then copied on a message form. 
~he 


con.vcrt numb Y~ If n.~thonzcd to do so by the message-center c~11ef, 
then· crypt 
ors, whiCh had to be spelled out in letters to perm1t of 


nt' 
ograpbi 
· 
· fi 
Abb 
. 
"wns and 
ng, mto their equivo1cnt .ArabJC gurcs. 
reVl- 


stand in th Punctuation si(J'ns are however, copied exactly as they 


e dec· 
b 
' 
typtographed message. 


SEC'l'ION XIV . 


Importa 
CIPHER MACHINES 
Pnrngrnph 


T . 
nee of ei h 
. 
. 
. 
7 
S 
11111• posilion.-cip er machines in modern cryptographiC corornumcatwn---- 
0 


M 


ubst~tution-ci £her machines _____ ----------- - - - ------- ----- ------ --- - 
71 


achtne atr 
~lor maclunes 
-- -------------- -- ------ - - - - 
72 
M 
. 
orcli 
----- -- -- 
. 
. 
7 
"achmes afl'or ~g only monoalphabetic sub. tJtutwn- -------------------- 


3 


J he ad 
chug pol 1 
. 
b ''t t' 
- ----- -- 
74 
Vanta 


0 


ya phabetJC su Sol u J OlL --~------------- - - 


70 


g sand disadvantages of cipher roachmes---- -------------- - 
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·~p 
. 
cornmun· ort.ance of cipher machines ~n rnode~n cryptograph~c 
text, l'OO' ~c~tlon.-The rcmo,rks mo,de m parag111~h 1 e-f of tlus 
cicnt tob::dmg the present trends in the a1:t, are beheved to be suffi- 
of th 
clVe tho st d 
t 
1 . idea of the unportance of a knowledge 
c us 
u en o, c e111 
. 
d' 
cry t 
s and lim' t t. 
f cipher mo,chmes as o, Jlmcts to modern 


L' P ogra,phic co 
1 a .r.onst. 0 
However, in this text only observa- 
Ions of 
mmumca wns. 
. 
f 
f 
exposi .· a general charo,cLor co,n be.mitdo, le~vmg or a utme. text an 
opera -~Ion of detailed principles Jnvolved m the cons~ruc~lOn and 
bein tion of a few examples. More and more. o,~te:r:tlOn rs today 
thatg ~~v?tcd to tbjs phase of eryptogra~hy an~ 1t lS h1ghly probable 
to 
lWithm the near future cipher maclunes will replace code books 
a argo extent even in lower headquarters. 
71 T 
' 
h' 
'I'l 
tcred. 
ransposition~cipher rnac lnes.'- 
1ose are rarely encoun- 


f 
' Lhe :files of United Sto,tcs patents dtscloso but one exn,mple a d 


80 aras· 
l 
hin 
. 
h 
b 
n 
1s known no actul1 mac 
e as een constructed conforming 
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. 
I 
be said that substitu- 
to the specifications covered Lhcr m. 
t may 
d'l to nutomatic 
1 
·e r a J Y 
•• 
tion m thods lend thcmselve so muc 1 mm 
. ·h 
sibilitios for 
. . 
Ll d that t o pos 
cnciphcrment than do. trm1spostL1?n me 10 ~ 
. 
0' transpositions arc 


the construction of c1phcr machmcs for e.IIoctmo 
that a ma- 


. ll 
· t 
ould seem 
a.l most complctQly overlooked. 
Baswa Y 1 ~ l d 
orne moans for 
. 
. 
. . 
ld b vo to mc u e s 
chine for e!Iectmg tmnspos1t10n wou 
a . 
_ 
h 
been 11 fed into 


"storing up" the lctLcrs until all the plum text 
~s boO'un and the 
. 
b 
.I 
. 
pro css IS 
o 
the rna hmc," w crcupon L 10 Lran posing 
pears to be u 


letters arc finally brought out in what extcrna~Y a~(Tht be devised 
randomized order. It is conceivu.ble Lhat a macbm~.m omercly of the 
in which the disarrangement of the leLters is a funchwn s m· the ran- 
. . 
d il 
c angc 
number of letters compnsmg tho message; a Y t 
1 
• (T the clements 
d 
. . 
h' 
'd d f 
by rose uino 
om1zmg mac mery could be prov1 e ·or 
· 
· 


controlling the proe ss. 
bstitution prin- 
72. Substitution-cipher machines.- a. ~he ~u 'pher machines 


ciple lends itself very readily to the con structi~n ~h Cl preceding two 
for ertccting it. The cryptographs described . ID t 0 merely of two 
sections, as well as the simpl r vari tics makmg usc t Jre of hand- 
or more supcrimpo cl, concentric disks are in tho :~cult to use, 
operated substitution-cipher m chanisms that arc 
. hie manipu- 


ca 
1 b 
1 
. 
. 
·yptOO'laP 
.· 
~nou c crop oyccl for l'apicl or auLomatw CI 
. o their operation. 


latlOns, and arc quite markedly susceptible to crro~·s ID 
d many men 
For a long time these dc fecL~ have been rccogmzod .11n automatic in 
have stri 
t 
d 
· s mol o 
. . 
v~n . 0 pro nco and to perfect doVlCO 
·s ho.ve not, as a 


t~u func.tJomng. However the would-be in von tot f ·outing them; 
r e,hrcahzocl the complexity of tho problems con 1 cccssa.ry and 
nor ave they ap 
1 
. 
· tb tho 11 
h 
thorough 1 
1 proac 1.od those problems Wl 
. 
1 cqptogra.p y, 
with its m::.~vl~cl~c ~r both theoretical and practiCfi.p 
1 
• 
11ctical crypt- 
analysis with ituns 
~~elations, and th oretico.l as. well fahsumo.n ingenuity. 
' 
"' 1 o Poss'bil' · 
· 
o 
O'OOd 
However when th 
1 1t1os for tho oxcrCISC 
. ducing a o 
. 
' 
c pro bl 
. 
d p1 o 
. t- 
elpher machine is attacl 
om of clcvolopmg an 
·a ph ic o.nd cryp 
analytic engineering st~~f b~ a competent Cl?Pt~g~o.cbincs can be 
developed. At this "~··t·' h1ghly efficient CJphel 
hines arc now 
. 
l 
. 
.. .. ~. tng so 
ll 
t mo.c 
m aetna usc lor Pl'actical 
n:to very oxce en 


b. It is obvious that · secret communications. 
·t 


1 
. 
0 should be 
autom t' 
. 
. na tJ 
. 
equipped with a keyboo:l'd f a 1c devices of tb1S. 
r duplicatmg 


that of an orclino.ry typ ? some kind rcsombhng 0 'd TYlan ipula- 
CWl'J.tc 
. 
' 
·apl 
.... ~ 
. 
tio:n these machines must b r. FLU'thcrmoro, for 1 . rns affordmg 
speed in operation, such as ol e t ~ctuatcd by mcchants:rnpresscd air, 


cc He Ol· 
. 
t rs co 
electromagnets, etc. 
sprmg mo o ' 


73. Machines affording Only tn.o 
. 
ubstitution.- 


Little need be said of those rnachin.e:?alp~abetlC 5 rdinary keys of 
the keyboard are merely covered witl :m WhlCb the 0 
boar.irlg other 


'I'l 
. 
l removable caps 
. 
letters or characters. 
:toy y1eld only th 
. 
1 


1 
0 of substitu- 
c sunp cs L uyp 
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tion cipher lmown and 
. 
the mcchanl· 
. 
have lltLl 
Lo recommend th m. 
Even when 
sm 1s such th t 
1 1 
. 
into play if th 
. 
a a w lO e en s of alphabet can be brotwht 
' 
c nctpll rm 
t . 
l 
. 
. 
b 
20 or more lett 
b 
11 1s manoa phabeLw for a successwn of 
graphic seeurit;r~ 
cfor~ the alphab L changes, the degree of crypto- 


are interr latcd lS relatiVely low, sp ially if the various alphabets 
of primary 


00 
as a result f thrir clrrivn,lion from a limited number 
mpon nt . . 
74. Machines aff 
. 
recent years th 
ord1ng polyalphabetic substitution.-a. In 


several cipher mcrch ?avo bo n pla 
l upon the commercial market 
not be describe~Chl~os _of mor than ordinary interest, but they can- 
secondary alp] b 
0~ 0 m detail. In some of them the number of 


1a cts ls 
. t l' . 
. 
l 
ment,_ or rn.Lhor the 
qu1·c. mnt?d, but tho m ~hod of tLmr emp ?Y- 


the Cipher al h b m~nuor m wlucb th mecbamsm operates to brmg 
cryPtograrns p ~ cts m to play is so incrcnious that tho solution of 
d·m ul 
Pleparcd b 
b 
. 
• 
d' 
l 
1 c t. This 
. 
Y means of the machine IS excee mg Y 
othe1· thing b . Pomt shoulcl be clearly rccognizod and understood: 
l h 
etng g z 
. 
. z 
a p abets co"'t , 'b. 
ua ' the manner o·f shifting abo1tt 01' vary~ng the c~ptter 


• .r · 
'' 1 t Utes 
'J 
J ' 
1 
b 
0J alphabets · 
more to cryptographic security than does ttW num er 


t 
tnvotved 
. 
· · 
't 
s'ble 
0 em~loy 26 d' 
' 01' thetr type. For example, 1~ IS qm .e pos 


1 


as to Ylcld g. tract-standard alphabets in such an ITregulai sequence 


~ixcd alph:~~ZCl~ security than is n.O'ordcd by tho usc of 1,000 or more 
lillportance of ths .m a regular or an Cftsily-ascertained method. 
The 
b 0 
lS po· t · 
· d by jnvenLors. 
. · ne of th 
. m · 1s not crenerally recogmze 
. f 
d 
c1ph 
c so · 
b 
d 
I pment o goo 
or Jnachi 
. l'lous limitations upon the eve 
0 
h b t 26 
do 
nos 1s th 
· our alp a e ' 
' 
es not lend it 
at the number of lettei'S m . 1 m~nipulation, 
t ccause it has ~c~£ Well to mechanical or mathei?a.~ca perfect squn.re. 


the alphabotu . the facLors 1, 2, n.nd 13; nor IS 


1 :Crs much more 
could be dono. consisted_ ?f 25, 27, or 3~ c:~fs to' the 26-lctter 
alphabet intr' d The add1L10n of figm'es 01,;! ul' Y that the crypto- 
gra 
. 
o uco th 
. 
. 1 dJ.W.c " 
ms will 
s 
c senous practiCa 
d ·the cost of trans- 
. . 
con.ta: 
1 tters an 
llllttmg ;.,...t 
U1 characters other than o 
d symbols by Morse 
t 1 
....... ermi t 
. 
flP. 
e cgral)h"" . 
X uros of lottors 
:figures, 
·t or another em- 
l 


J 1s n , h. . . 
' 
f one sol 
. 
' 
P oyccl to 
. t~to 1b1t1vo. Subterfuges 0 


1nlly impractiCal and 
cn·c 
arc ust ,. 
expensive 
Utnvcnt this difiiculLJ, 


c. The · 
. 
. s machines which have 
prJ 
· 
. 
111·1ou 
. . 
thus fn.r b 
nclplcs unclerlymg the v d 
mplex that no descnptwn 


f 
con. d 
1 
. 
. an co 
o them 
011 
b eve oped are so diV:OJ.se t 
However, in the next pn.ra- 


graph a £ 11 
0 undertaken in this tex · tn'' dealing with the advan- 
ew re 
'k 
. 1 charac ~' 
. . 
. 
tages and d' 
lllai s of a g~era . 
achines in llllhtary commumcn.- 


tions t d 
lsadvantages of crpher m 


75 o a-y, are deemed pertinent. 
f . h 
h" 
· The ad 
d d"sadvantages o Clp er mac 1nes.- 
u 
vantages an 
1 
d 
· 
· 
mili' 
a. 
ntil very 
tl 
de methods were pre ommant m 
tary 
, 
recen · y, co 
. 
cryptography within the United States Army but the reverse IS now 
the case. 
This importn.nt change has been the result of advances 
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made within comparatively recent years in the design and construc- 
tion of cryptographic systems and apparatus. 
IL may be useful to 
compare code methods in general with methods based upon crypto- 
graphs and cipher machines in general to note the advantages and 
disadvantages of each category o£ methods. 
. 
. 
b. (1) When designed for keyboard operation and cqUlpped wrth a 


standard typeWI·itor keyboard, cipher machines afford much mor,~ 
speed in enciphcrmcnt and decipherment than do any" hand-operfLtecl 
cryptographic methods, including codes and certain types of crypto- 
graphs. 
Comparative spec l test"! gave the following data recently: 


Number of groups or wo1·ds per minu.te 


Docryptogrnphing 


1 
4.04 


2 
1.04 


3 
1.75 


4 
2.74 
5 
3.14 


6 
30.00 


M 
' Method 1-A 2-part code or 6,000 groups unonoiphored 


othod 2- 'J'he same eodo enciphered by n secure systo;n. 


Method 3-'l'he obsoletey. S. Army ipher Dovico, 'J'ypo M-94. 
. 
. 
ot rovidod with a 


Meth.od 4- A small oloctncnl cryptographic machine giving Inmp indicntions but 11 
P 


ty~ewnter keyboard. 
t 
01 provided with 
fothod 5-A smnll mecbnoicnl cryptographic machine produciug a printed record 1 11 
11 


' 


a keyboard. 
. 
'dod with n koy- 


bo~~~bod G-Ao electrical cryptographic machine producing n priutcd record and prov• 


(2) When properly designed, cipher machines and certn.in types of 


"hand-operated" cryptoo-rapbs a[ord greater guarantees of Cl:ypto- 
. 
11. 
. 
b 
. 
. d " JenCll and 
gmp rc secunty than do code methods or hand-oporat.o 
I 
. 
d 


~aper" cipher systems, because machine;:; can accurately, spo?dily, ~n 
tirelessly perform far more complex cryptographic operatrons t ~l 
can ~ossibly be performed oven by the most skillful eryptogra~her~ 
workrng with code books and cipher tables or with hand-operate 
cipher systems. 
' 
(3) Th 
h h · · · 1 
. 
n.re un- 
oug t e rnrtra cost of a mphcr ma.chino maY comP 


favorably with the init.ial cost of a code book the over-all c_ost ~f 
maintaining cryptographic security by means ;f cipher roachm~s _ 


1s 


probably less than that in the case of code systems. 
Good roacbr~1.es 


designed by technically qualified exports afford a multiplicity of key~g 
arrangements; once distributed there is no necessity for recall~g 
"old editions" and substituting "new editions " as is the case wrth 
code books. 
Therefore, the labor costs incide~t to the necessity for 
repeated preparation, printing, and distribution of code books, to- 
gether ~ith the l~bor costs incident to the necessity for rep~ated 
acco_untmg o~eratwns, correspondence exchanges relative to Jssuc, 
recmpt, etc., m the end overbalance the hio-her initial cost of cipher 
machines. In this connection it should b: stated that me~·ely the 
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cost of printing n,n eel iLion of 200 copies of a lnrge 2-part cocl_c is well 
over $25,000. 
Thjs do s n t include Lhc osL o[ th labor mvol~ed 
in Lhe compilation of the code, nor of that involved in preparmg, 
printing, and binding cipher tables for supercncipbcrment, etc. 


(4) The secmity of a cryptographic ystem involving the usc of_ a 


p_roperly designed cryptograph or ipher machine. is noL wl:oll~ . dl~­ 
Slpated by the capture or compromise of Lhc machmo or d vwe 1tsel • 
as is tho case with a code book. 


(5) On the other hand, it must he admitted that, as a g neral rule, 


tho solution of a very f w cryptograms by long and laborious crypt- 
analysis makes it possibl , in the cas of a ipher machine, to decry~to­ 
graph more or less readily all future cryptograms in the same machme; 
whereas in the case of a largo 2-part code tho solution of a few co~e 
messages can hardly be accomplished at all and practical analysis 
of the code must await the accumulation of a' largo amount of tr~ffic. 
Even should the plain text o[ on or Lwo ode messages be ob~amcd 
by theft or capture, this would not permit Lhe prompL d coCim~brf 
subsequent messages in th same code. whereas Lhis may be posst e 
in the case of cipher messages 
' 
. 
(6) A · 
· 1 
. 
· 
. 
d 
1 clchcate 
gam, ctp 1er maclnncs ar 
as a rule complicate anc 
·b · . 
h · 
Th 
' 
' 
1 ·11 for t en 
mec amsms. 
cy r quire con id rable technical s 0 
1 
o 
, 
.. t" 
. 
ot a ways 
pr POI 0PCla 10n by cryptographic clerks, skill wluch mn,y ~ ortant, 
be po~sessed by such personnel. 
What is perhaps mo_re unp s ecial 


compflcated cipher machines require the skill and servJCeS of u~ually 
Personnel for th · , 
, 
. 
· 
· . 
They 
. 
. 
. ,. 
cu proper mamtcnancc and rcpau. 
s be avail- 


requiTe ~lectrlc CUlT nt for operation, which may not alwa;d-operated 
a~le. , For all these reasons, and because code books or ha and reqillre 
Clpher systems are usually much more easily transportable as a rule, 
less stor:age and operating space ciph r machines cannot, Division. 
be earned fonvard of the larg~r h adquartors, suchlo~: n.nd troop 
Hence,.codo m thods mu.y prod minn.Lc in the lower cche 
formatrons. 
t up for 
( ) I 
. 
r ted to se 
. 
7 
f the Clphcr mu.chinc mployccl is at all comp lCa 
d some tunes 


enciphering and deciphering errors n.ro easy to make an rclaLive to 
11 f . 
l 
. . 
' 
. 
cssagcs 
ca 
or cosL y or labonous cxchano-es of scrvlCC m 
u· lL because 
h · 
. 
· 
>=> 
btful P0 
t en· con eLton. 
However this mn.y be a dou 
is a complex 
l 
. 
' 
. t to errors as 
c?mp ex supercnctph red code is just as subJCC 
ctpher machine. 
. 
cipher cannot 


. twns 
. 
(8) As regards administrn.tive conunumca 
' tion or abbrevl- 
. 
. 
f condensa 
. . l 
compete wrtb code from the point of vww o 
1 


(J" as the ongma 
t. 
A . 
t 1 
t as on"' 
f 
a 10n. 
01pher messao-e is always a 
eas 
. d by means o a 


o 
prepare 
. 
. 
plain-text message, whereas a code message 
, 
of condensatwn rs 
l 
d 
. 
. 
1 rcre deQ"Iee 
arge co c spocrally compiled to glVc a a "' . . "' 1 lain-text message. 
· 1 t orwmn. P 
1 
usually much shorter thn.n the cqmva 0~ 
ll 
structed code boors 


This arises of course from the fact thn.t m we -con 
' 
' 
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single groups of 4 or 5 characters may represent long phrases or even 
whole sentences. 
(9) As a rule, cipher devices or machines cannot readily be operated 


under all sorts of weather conditions. In very damp or in rainy clim- 
ates, machinery failmcs are quite common, and it is difficult to keep 
delicate machines in regular service. Moreover, in" hot, humid clim- 
ates no machines can long survive the disastrous corrosive c:frccts of 
moisture, vegetable growths, etc., whereas printed matter is h~rdly 
affected by those elements. Finally, under field conditions, :vhil~ a 
code book can be manipulated outdoors in all sorts of weather, m ram, 
sleet, or snow, in high n1titudos whore the temperature is very l?w, 
or in tho tropics where it is very bot and hmnid, a cipher machme, 
especially if electrical, often cannot be operated with success for more 
than a few minutes or, at most, a few hours. 


E. CODE SYSTEMS 


SEC'.riON XV 


CODE SYSTEMS IN GENERAL 
Paragraph 
Preliminary remarks 
------- ------- 
76 
. 
- -- - --------- - ---- --------- ------ 
77 
Intermixtures of code text and other kinds of tcxL--- - ---------------- 


76. Preliminary remarks.- a. Sections XIV to .XVli, Special 


Text No. 165, wore devoted to a general consideration of code systems 
and enciphered code. It was there indicated that code systems are 
systems of substitution whore th~ clements of the substitutive process, 


· · 
t 
ces are so 
compnsmg letters, syllables words phrases and son en 
' 
num . 
th 
· · · 
. ' 
' 
. ' 
. to reconstruct 
Cious 
at It IS rmposs1ble to memonze them Ol 
. . 
them at will when necessary, so that printed books cont~mm~ t~cse 
clements and their code equivalents must be at hand ID OldCI to 
cryptograph or dccryptograph messages. The various types of c?de 
groups were indicated, together with methods for their constructiOn 
by means of permutation tables. One-part and two-part codes were 
briefly discussed. Finally, a few words wore added for the purpose 
of indicating various types of enciphering code for greater cryp- 
tographic security. 


b. Practical cryptography must take cognizance of the fact that 


the texts of governmental as well as commercial and social telegrams 
must conform to certain standard forms and practices. 
A subsequent 


text will go into these matters but at this moment it is only necessary 
to indicate that international telegraph regulations in the past 
have exercised an important influence upon the structure of code 
groups and upon the selection of cryptographic systems for their 
encipherment. 
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. f 
nee is made to numenr 
c. In the subsequent paragraphs, when 10 ere 
d groups it will be 
cal code groups, or number-co e group ' 
£d. 'ts · when re er- 
d 
or figure-co e 
' 
f 


understood that the code groups ar comp 
d groups or letter 
oscd o · rgi ' 
ence is made to alphab heal cod groups, . 
·ou 
arc composed o 
. 
or letter-co e 
' 
f 


groups, it will be und r tood thaL the cod g: 
P d 
Lo mixed code 
letters of the alphabet; and wh n reference JS m~ 0codc groups are 
groups, or mixed groups, i L will b understood that t e 


composed of intcrmixtur s of letters and figures. ki ds of text.-a. 
77. Intermixtures of code-text and ot~er f n . -iug plain text 


Only in commercial code messages is th p:·act.lC 
0 n;: governmental 


and code text common in modern ommumcatwns. . 
mixtures arc 
code messages, militar.y, naval, or drploma rc, 
. d'catcs abysma 
. 
t' 
such mter 
l 
d 
. 
t 1 ·ams m l 
.t 
to ay so rare that their presence m 
c cgr 
. . hie secun Y · 
ignorance of some of tho fundamcnLul rules of cryptog~~p meaning of 
Because the plain-text words give cl finite clues t~ 
~ apparently 


the n.djn.ccnt cod groups, even though the for~cr ~sa and, but, by, 
convey no intelligibility in thorns lvcs (such words 
e constitutes. a 


. 
. 
h .. pres on c 
. will 
comma, for, ~n, perwd top that the, etc.), t eu 
f this dangei 
l d 
' 
' 
' 
· 
are o 
fata 
anger, and no cryptoO'raphcr who rs aw 
t 


b 
'hm~~ 
conn cnancc such intcnnixtw·es. 
ode whic 
d d 
b I 
f 
loy a c 
· clu e 
· to ten happens that corr spondouts cmp 


1 


ords not Ill 
d 
. · · 
. 
. 
. 
sua w 
monco - 
~o provJSlon for encodmg prop r names or unu 
n leave Lho t 
e will 


m the vocabubry of the cod book. Rather t?a · 'ts appearanc .. _ 
bl ' 
. 
. . 
s~nce ~ 
the coii e 
a e ~ext lll plau1 language in the m ssagc, 


1 


message, 
f any 


surely lead to clues to unauthorized Teading of t ~e 
by moans 0 d is 
d 
. 
. names 
the co e 
spon cnts cnc1phcr such words and proper 
when 
·e not 


, . 
. 
. 
cases, 
rds ar 
preallangcd Cipher system. 
Also m some 
t'ons of wo . flections 
limi d · · 
' 
. 
inflec 1 
, m 
to rn rts vocabulary and Lhc vanous 
tho proper 
. is not 
. 
. d 
ffix 
h wever' 
replcscntc , the correspondents may su . 
dtu'c, 
0 
, 
to(}'ra- 
(" d " ". 
" ' , 
'I'bis proce 
the ciYP 
o 
e , 
mg, 
'tlon," etc,) in cipher . . 
. 
1 


reduces 
. 


to be recommended, b caus it consrdcrab Y 
des within 


phic security of the whole syst m. 
f two or more c:re making 


c. So:m.ctilnes conespo.nd nLs make usc 0 


0 when theYll the special 
th 
. 
-n the cas 
h ve a 
. 
e same message. 
This is occaswnu.uY 
d s uot a 
s 


1 
· 
0 
ns bem.g 
usc of a general or commercial code w 110 ·h latter e:s: 
. the mtcr- 
1 · h oc 
pros 
. 
. 
. b 
. oss t e 
h we VOl' 
f 
exptcssrous necessary for their usm 
' 
times, 
0 
h IJurposes o 
t . d . 
d 
Some 
for t e 
con a1nc m a small private co c. 
· 
8 


dono 


. 
f 
. l codes J 
·fuge. 
mrxturc o code text from scvem 
. subtei 


thor P001 
sectccy, though it is, as a rule, a ra 


---. -~~ 
~~--- 


/ 
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S ECTION XVI 


EN lPUERED CODE 


P )'m 'nary remarks on encipher d code __ _ 


re 11 
' ] 
t 
-- - - 
'"! 
a! Lyp s of meLhocl:; of :;upcrenc1p 1ermen -------- 


J 1e gener 
· 
------- 
Transposition m ethods_ - 
------- 
----- 
SubsLituLion m ethods 
----------------- __ - _ ---------:- 


AriLhmoLical m Lhod ~o~ _ ------------------------- 
Sing! or fixed additi ves __ - --- 
- 
- 
------- 


R epeaLing or recurring-key adcliLives and subl.m ctors_ 


Pnmgroph 


7 
79 
so 
81 
82 
83 
84 
85 
86 
Nonrepeat ing aclcliLiv s and subLracLors 
__ 
_ ____ -------- 


Concluding remarks on ariLhmetical m Lhocls_____________ ___ 
s 


Tho purpose 
78. Preliminary remarks on enciphere~ co~e.~a . rcvious text, 


of en iphcring cod hav ah· ady boon oxplamod m tho ~ nposition of 
togeLh r wit,h brief indications of m tho Is. Tho sup~I~odiLY one of 
a good ciph r system upoll the code Lcxt of 1t messngo 18 li 
r~pJ 


1 
y for 


tho safest and mos t, practi al of all m U1ods of ·ryp og 
gov mm n Lnl uso. 
. reference, 


b. In the subsequent paragraphs, for br vity and 011sotmal or tmen- 


the term placode 


1 will be employ d Lo lcsignn.Lo Lbo 11~ ~the term is 


cipher d code groups ropres •nLing Lh plain-Lext cl •rno~h s 'other hand, 
derived by to.Icscopin~ tho words JJlain and code. On ~ ~l product of 
tho term encwocle 


1 
w1l! b cmpJoyt'd Lo designate t,bo Im. 
tho words 


tho supcrcnciphcrmont,; it, is lik •wis derived by tcloscopmg 
enciphe1·ecland cocle. 
. 
or (British) 


c: Tho terms superenc~phe1· d code, superencipher·me11~, 
undergoes 
rec~phered code and recipherment all apply to code text wluch 
• subsequent pro?"'? of onciphonn nt. 
. 
,orO.nt in 


d. Tho tm"'?s tnduato, 'Ystem nnd ind.Wo.ro, are vorJ' =~y so in 
connoct10n With all ci·y t 
•. . 
spcci 
. eli 


.· 
. 
. 
J~ og1·apLUC procedures but e 
The Ill - 
connoe~10n ·w.tth cnc.tphonng sysLcms 


11 
l' d to code. 
r the 


cator gives information J·clativo t th s . app t 
bl s to use, ~ 
. 


pr?per point to begin in snob tn.~l 
0 Pl'Oper t~ eo 'nfonnat10ll Ill 
this rcgn.rd will be g.ivcn in sub 
s~ etc. 
Fm the1 1 


79. The general types of :rn qu nt Paragraphs. 
. herwent.- 


Both transposition and substit, et,~hods of superenclp 
pplicd to 


supcrenciphcr code. 
Thoro U.l·c u ~on methods may be .ab at first 
1 
lll'ttlnu t' 1 
d w.Luc · 
t 
g ance appear to constitute a thiJ:d 
0 leu, metho s 
. hermon 


methods since they involve math 
cn..togory of suporencl~JJ tlY re- 
bl. 
. h 
. 
cnlat1ou,} 
11pp11I 
· 
. 
sem mg nmt er transpos1L.ion 1101' 
. processes 
. . dcepei 
d 
. 11 
h 
sub LILut,· 
I:fowcvcr, 
stu y wil cad to t e conclusion Lhn.L Lh 
· ~on. 
. 
thods are 
su bstitutivc in chamctor. 
so n.t·ILh.rnctlcl11 rno 


80. Transposition methods.- a 1' 
h"r·ci.n 


. 
. 
· 
rn.nsp · · 
h ds w '' 
whole code groups or soncs of Lhon1 ll.l'c h'fOSltJon m. ot 0 
·du· 


1 
g to 


S 1 tccJ 
b 
t 11CC01 
some k y are not frequcnLly encountered 


1 
, 
11 ou. . 
othods 


· 
I·ansposiLlOD rn 
' Prououncou "play-code" and "n·sigh'·codo." 
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. 
. 
. 
. 
b 
rearranging or shifting 
applied stnctly w1thm the code gLOups, 
Y 


1 


b en used to a 


about Lbe leLters or figures compo ing .them,J lave ·y 


1 


l934 Lrans- 


b 
r 
Pnor to nnum 
' 
' 
limited extent for anum r o years. 
· 


0 


for super- 
position proc sses for pl'O<. ucmg n 100 


1 


· comm r ial or 
] 
. 
· de m s ngcs, L 
., 


enciphering cod , wor prn, ti ally n vcr employe\ m . gular vowcl- 
govcrnmcnLal practice b 
auso 
h Y cl stroycd t 1 
1° 1 o-el' conformed 


I L tl cy no onb 
consonant structure of code group. so L 1a 
1 


1 
·co-ulaLions re- 


. 
. 
. 
l t leo-rap 1 1 b 
to the rcqUJrcmcnts of Lhc mLernaLwnn 
e ":' . 
· 
this respect 


. 
Lh 
·estn cLwns m 
1 t 
ferred to m paragraph 7Gb. 
Ilowev r, 
e 1 
·obablc t 1 a 


· · therefore P1 
d 
were lifted on Lh 
daLe indi aLed and 1~ JS 
ill be encountere 


transposition procc ses for supcrcnciphenng code w 
. 


much more frequenlly than in t b pa t. 
. .· 
methods for tJ:is 


b. 0,". of .'l>o tnost commonly used Lranspmntwn ithor with spcc.al 
pmpose 1s snnpl keyed- olumnar transpositiOn, 
. without Lh sc 
t 


. 
l . 
. 
ll 
d blanks, Ol 
. ·or 
rna nccs, c . 1gns or forms luw nw nu s an 
b · cct Lo ou 
f . . 
'' 
' 
b 
• 
. very su J 
I . 
atmcs. 
lh sy ·tom a a whol ' howcv r, IS . 
ration. 
t lS, 
d 


· 
1 · 
· 
·acLICal ope 
· t can 
an rcqun·cs ngh-grade p rs nncl for 1Ls pr 
though 


1 
f 
. 
·1· t y uso.gc, 
· f well 
o COUl'sc, wholly unsuiL d for pl·acLICnl ffil 1 ar 
. 


1 


system 


1 
k 
b 
l 
d 
l 
· 
of sue l a 
de boo 
e cmp oyc . for oLh r l)Urpos s. 
o uLwn. 
'f the basic co 
constructed 1s a ver·y dire ulL maLLer espemally 1 
. 


. 
.lU 


1 
bstltU- 
lS not known. 
thods of su 
. 


81. Substitution :m.ethods.- a. All of the m:ailablc for use m- 
t. 
1· 
b 
· 
arc a 
10 
U app ten, le m the ca. e 
C ciph r systems 
up 


· 1 · 
t 
draw 
supercncJp 1cnng cod 
easy ·o 
· 
s- 


b M 
l 
· 
. 
f course, 
b k is JJ1 po 
· · onoa JJhabetic methods.- lt 1s, 0 
the code 00 do o-roups 
ono or more single-mixed alphnboLs. Wh n . ··in•l or p[oco ,.;~y fo> 
sessl·on f th 
d the Ol'lo 
y sccu · ' d 
. 
. 


0 


· e en rn.y crypLann.lysLs an 
t yield an 
actual co e 


are tber fore at hand Lhis method docs no 
when the 
f commor- 


. 
' 
. 
. 
.Even 
£ set o 
reasons not, neccssn,ry here Lo mch aLe. 
. . 
no o a 
tho recon- 
b 1 . 
]· 
l t IL JS 0 
type 
_oo c Is not cnown, but iL is known t 1a 
d'Jicrcnce 
' 


mol codes hovino • roup of Ll•o 2-locLc>· 'ult 
1 
ulphobctic 


strucLion of Lho ~ip 


0 
h r alphab Ls is noL dim,c siillple P~ y . or there 
P l 
A ve1Y 
ccsswn' 
d 
c. 
o Yalphabetic methods.-(1) 
cd in sue 
t to be use 
tl d · 
· J arc us 
·d 1al so 
me 10 1s to hn,ve 5 alphaboLs wluc 1 
·b indivl 1 
't lf. 
b 
. 
b ts t e 
o-c I so 
1 
m~y 
n, serios o.f s ts of 5 alJ?ha 0 
' ·n the mcssab · For examp e, 
bcmg determined by indi otors msm·wd ~ m•Y bo use~~ y method, the 
(2) Any sort of polyalpbabetic me tho .. continuou~- .._c bic methods 


~he l'opeu.Lino--l~ey m tbod, tho runni~~ ~pplied . 
_D1!~i monogmphic 


mtcnupted-key mctbolt, 
tc., car: 
f clio-rapbic 
l 
b 
l 
binaLIOllS 0 
o 
. 
may a so 
e us d; a so, com 
For example, usmg 
m thods n,rc Ir quent. 
. 
Itcn employed. 
t ble giving pro- 
(3) Tables of various sorts aro 


0 
of 5 figures, a . a 
of cli()'its mn,y 
t bl 
l. bl 
t 
de groups 
binatwns 
· b 
a a e app lCa .e 
~ co 
. 
Lcrs for the com . 
·he letter group 
notmceable combmatwns of lot 
h as 75152 mto t 
result m converting a group sue 
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KOBAL. Tables for substiLuLing combinations of letters into ot?er 
combinations of letters arc of course ccjun.lly feasible. The substitu- 
. ' 
' 
fi 
tion may be strictly digraphic, combining two 5-lettcr o.r 5~ gure 
groups into a series of 10 digraphs; or it may be a combmatwn. of 
trigraphic and digrapbic substitution, each 5-charactcr group bemg 
. 
. 
· 
.· 
Other 
spht up mto a 3-chamctor and a 2-chamctor combmatwn. 
. 


combinations arc, of co1.~.rsc, also possible. 
. 
. 
. 
. 
the 
(4) In all the forcgomg methods the chwf obJecLwn IS ~h~t . 


advantage of the 2-lctter diiTerontial feature i more or less chsslpated 
by tho enciphcrmcnt, but this is true of every subsLitutivc method 
that is superimposed on code. 
. h · 


(5) The disadvantage referred to in th pr ceding subparagrap 
18 


absent in those cases in which the cnciphermcnt bpcrates merelY 1° 
substitute other code groups of tho same book for the message t~b 0 


groups. The most common m thods of this type make usc 0 
te 
fi 
· 
· 
· 
: us ways 0 
gure-codc groups tho latter bom()' mampulated m vauo 


' 
. 
b 
. 
. 
h . . letter- 
chango them and the resultmg groups then bemg g1von t en 
code equivalents. 
Some of those moLhods are explained below. 
. 
82. Arithmetical methods.- a. These are today the most~~ 


portant of tho various methods of suporcnciphering code, and mu~ d 
dealt with in somewhat greater detail than the forcgo in~ mot.;;~ 
There arc several difieront typos of treatment, each of which WI 
briefly discussed in tho subsequent subparn.grapbs. 
the 
b. In discussing those aritbmoLical mctl ods many roforonccs to d 
terms additives an l subtractive , or subtractors will be encotmtcre · 
They will be defined in due course 
· 
· 
roen- 
83. Sing~e. or fixed ad~itiv.es.-a . If the code groups are nu roup 


cal, the additwn of an arbitrarily selected number to each code g 
t 
· 
. 
. 
· h rrnon · 
m tho code message constitutes a srmplc form of superencip 0 . 
ly 
It may b? varied by prcarrangcm nt between correspondents, s:::es- 
by changmg the fixed number as £r qucntly as may be deemed . of 
sary, or by some easily arranged system of change. Tho group . 


8 
digits composing the number which is added to the placode valu~~ 


1 


nl 
d 
add . . 
addtttve, 
commo y tormc 
an 
ttwe grou'YI or moi·c often an 
· 


• 
• 
1:'1 
' 
' 
d·t·ve JS 
or sometimes simply an adder. In decipherment, the ad i 1 . 
merely removed from tho received oncicode groups by subtractton, 
leaving tho placode groups, which can then be decoded by reference_ to 
the code book. Often tho elate or some number derivable froro tho 
date is employed as tho additive but usually.the number is siinplY !1!1 
arbitrarily composed group of digits. Because tho same nurobel' 15 
employed throughout the onciphermcnt of the entire code message, 
such an additive is called afixed additive. 
b. Methods such as tho foregoing are particularly weak crypto- 


graphically if the basic code book and the code groups embody lilnita- 
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tions in eonstr t' 
F 


nect 
. 
. h 
uc 1on. 
'or example, should it be employed in con- 


ton WIt a c d h 
. 
l 
froni 


0001 


t 
0 e avrng on Y 3,000 groups numbered consecutively 


the tbr 
? .2999, then tho initial digits of tho groups arc limited to 


therefOl~e ~gits 0, 1, and 2; the application of a fixed additive can 
enct' d 0 produce only throe difroront di()'its as tho initial digits of the 


co o text 
Th' 
"' 
the detcrmina··· 
lS . ph.o~o.men.or: would, of comse, soon lead to 


c. On 
twl~ of tho nnt111l d1g1Ls of tho placode groups. 
the case 0 ~ather simple scheme involyjng tho use. of .fixed additives in 
is to app~ codes having ~lphaboticul as well as numerical code groups 
ing the r 
~he fixed addttivo to the num rical code groups ropr sent- 


code gr p am-text words or plU'asos and then take tho alphabetical 


I 
oups corr 
d' 
· d 
n codes f . . ospon mg to Lhe sums as tho Jinn1 cnc1CO o groups. 
the proc 0 this tYPo the additives may be rather largo numbers and 
css of .6 d. 
. 
the sum . 
lU mg the alphabetical code groups corresponding to 


groups s !slivery easy. But in codes wherein only alphabetical code 
given tabre stcd, that is no figm·e-codc or numerical groups are also 


' 
e add'· 
' 
hers. It 
ltives employed must natumlly be rather small num- 


for examp~~ulcl be cxtrom ly laborious _t~ co~t . 573 groups fo~w~rd, 
1 to 20 
In cases such as those additives hm1ted to numbers from 


or 30 
· 
d. (1) In . arc common. 
. 
. 
. 
, 
may b. 
stead of adding a fixed number m onmpherment, the latter 


must bee s~tractccl, in whlch case, in decipherment, the fixed number 
be term ad clod to the encicode O'roups as received. Such a gi:ou~ may . 
e a s bt 
. 
"' 
b 
ubtractwn JS the 
process 
u Tactwe group or subtractor, ecause s 
f 
used in 
. 
' 
. 
t tl e crroup becomes, o 


COU1·se a 
nc1phermont; in doCJphcnnen 


1 


"' 


(2) ' n additiv 
· Adclit" 
· 
. 
. d 
mcrical group may be 


altcrnat d 
1~n and subtractwn of a [G-.e ~u 
simple sub- 
'd. 
e With' 
, 
rding to some 
st 1ary ke . . . m the same me~sago , 11000. . e O'roups conesponding 
to the k y' for example, a senos of addltlVt ~onsist of the numbers 
200, looS:orcl BAD might, by prearran.go~en ~itive roannor. 
Or the 


corrcspo~ l OO. 
These might bo used Ill] 10pe umbers alternatively in 


addit 
1 
·" 
cnts might ao-rcc to use these co+y2 


11 
00. - 100 +400 -200 


v c an 1 
"' 
b as 
' 
' 
' 
' 
+ 100 
· c subtractive roann or, sue 


e. ~dd~~O, +200, - 100, e.tc. 
, 
oncarrying addition, is just as 


• 
.l'1. 
1t1o 
· 
· g' or n 
Sllllplo 
n Wlthout 11 carrYU: ' ddi.tion with" carrying"; and sub- 


tractio:s n?rmal addition, ~]Jat,;s~;. nonborrowing subtraction, is just 
as sirn l Wlthout "bon·owJ~g, 
tis subtraction with "borrowing." 


It is ""p e 


1 
as normal subtract?,on, th·~esp~ndonts agree in advance on this 


.o..u.ero y n 
tb t tho coll 
Point 
ecessary 
a, 
· tently throuo·hout a message. In 


and a 
l 
l 
. . cess con sis 
"' 
l)}'actic 
h l P Y t 1~ P~ 0 
. common to perform those processes 


· 
c, 
owevor 1t 1s m010 
7 
· 
"illthout " 
. ', 
, "borrowing," so that h e opemtwns can be 
carryrnO' 
or 
l 
. . 
H 
. h I ll 
perjorme l j 
· l .~ 
·nt~t as in norma wr"litng. 
erewtt 
o ows 


G rom eJt to 7'tu 1' 
an o:xalUplo which will make the matter clear: 
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Exa111ple A 


(a) Example of "noncarryin(!" acld1.tion in nciphcrmcnt: 
5517 
3082 
9015 
671° 9541 


(1) Placode ___ _ - -- -- 
--- 
- 5678 
5678 
5678 
5678 
5~ 


(2) Fixed group for addi Lion______ 
4119 


0185 
8650 
4683 
1388 


(3) Encicodc---- - --- ----- - - 


(b) In dcci]>hcrmcn t, "nonborrowing" subtraction is npplicd: 


1388 4119 
. 
0185 
8650 
4683 
8 
(1) E nc1code ______ - 
- -- ----- 
5678 
5678 567 


(2) Fixed group for su bLrnc Lion_--- 
~5~6~78~~5~6~7~8~~~~6~7D100 
g'g55441 


5517 
3082 
9015 
(3) Placode ___ ----- --- ---- -- 
. 
d the 


. 
. 
the mwucn ' 
(c) NoLo Lha L in Lhc dcciphennl'nl process Lhe enc1code SCI vcs as 
d the placode 


addiLiv 
usc I in Lhc encip hermr nL serves as Lhe subtrahend, an 


is Lhe re111at'nricr. 
· 
h 


. . 
. 
th sa.mc tbroug - 
f. In Lhe forego.ing example tho.ad.dtLive ~·emam s 
. e. is onlY the 


out the supcrenc1phermenL but 1t 1s obvwus Lha t tlnsadd't' es maY 
simplest sorL of an atTungem nt. A series of different 
t w 


readily be employ d, as will be explained JaLer. 
. 
. cedure 
g. (1) It is, however, possible Lo make the cryptographiC P. 


1 
~httngos 
Lhe same in both onciphennonL and d ciph nnont, by propt. tive in 
in meLhod . They can both be made either additive or su tr ac otbods 
nature, thus r-equiring the leaming of but a single process. Two .111 
will be explained below. 
. . 
roccss 


(2) Both processes additive. If in ouciph rmont an addltl;.~·~e em- 


is used, and if in decipherment tho complement of tho adc 1 1 s the 
ployed in enciphormont is then added to Lho oncicode grou~ ' tbe 
decipherment also becomes an acldi Liv pro ess. For exa.mNP ;~ the 
complement of the group 5678, on a basis of 10, is 5432. 


0 


following: 


Example B 


(a) Example of "noncarrying" addition in cnciphcrment: 


(1) Placocl ----- 
-- 
___ - --- --- 5517 
3082 
9015 


(2) Fixed group for addition ____ ____ 5678 
5678 
5678 
(3) Encieode ______________________ 0185 
8650 
4683 


6710 
9541 


56~ 
1388 4119 


. 
. . 
. 
. . h rmcnt, 
(b) In decipherment, usmg the complement of the aclcliLive used 111 enciJJ 


addition reproduces th lJiacode: 


(1) Encicode ________ -------- -- - -- 0185 
8650 
4683 
(2) Complement of fixed group ______ 5432 
5432 
5432 
(3) Placode_____ 
___ ____ 
5517 
3082 
9015 


1388 4119 
54~ 
6710 
g541 


( ) 
· 
ro- 
. 3 . J3_otl~ proce~ses subtmctive.- By a. ve~y simple change lll_ P 


1d 


ceclme It 1s possible to apply subLmctwn m both enciphenuent £tl 
decipherment, using the same numerical groups as subtractoTS, thUS 
making it necessary to learn only one process. If the additi-v-e, 
instead of being in tho second line of Lhe three lines shown in the 
foregoing examples, is placed on the first line, and a subtraction 
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process applied th 
. 


encipherment o··'d ? plopcr r sulLs arc ohLnin l regardle s of whether 


1 
ec~pMrment is · 
z d 
· 
· 
~nvo ve . 
oLe Lhc following example: 


(a) E 
Example C 


'xample of " non borro · 
, 


( 
wmg subtraction in nciphermcnt and decipherment: 


1) Fixed group 
(2) Placode 
-- - 


(3) Encicod:----- 


(b) D 
---- ----- 
cciphcrm 
t ( 
- 
en 
subtTaction also) : 


- 5678 
5678 
5678 
5678 
5678 


5517 
3082 
9015 
6710 
9541 


0161 
2696 
6663 
9968 
6137 


.(1) Fixed group 
(2) Encicode 
------- - ---- 5678 
5678 
5678 
5678 
5678 
(3) Placoct 
- 
-- - ----- 0161 
2696 
6663 
9968 
6137 


(c) N'ote Ll 
t . 
-- 
- -- -- 
------- 5517 
3082 
9015 
6710 
9541 


th 
la l n the en . I 
. 0 1Jlacode as tl 
ctp l.enuent proc ~s the keying group erves as the minuend, 


111 the deciph 
1e subt1·ahend, whereupon the remainder becomes the encicode; 


the 
. 
erment pr 
1 
. 
. 
· 
enctcode as th 
oce s t 1e keymg group agaltl serves as the mmuend, 


(4) A 
e subtrahend, wher upon the remainder becomes the placode. 


a . 
Word or L 
. 
nuss. Tb 
wo 111 o::q)lanaLion of Lhis phenomenon may not be 


Processes tlc c:x:plan.aLion involves a consideration of th e natmo of tb e 
algebl'a. 
Nc:tnsclvcs when looked at from the point of view of simple 


Y denotes thoete ~he following, whore tho sy~1bol x d notes placode, 


1 
fi:x:ccl group, and z denotes encwodc: 


T~·~~apllloJ)·le A (a) ------- - --- - -- - - -------------- --- ------ x+ y= z 
T 
· 
Sing__ 
_ _______ x=z- y 


It is s hat is ___ _ __ -_-::::::::::::::~~~~ - -~~~~~~~~~~~~-------- z- y= x 
x and .ccn h re that y must bo subtracted from z ill order ~o recover 
· 
lU Order jh 
. . 
• · t 
Thus this method 
lll'Vol\Tc b 
~ at x may be a pos1L1Ve quanul Y· 
' 


...., s oth addition n.nd subtraction . 
.out · 
y- x=z 
'f . Ill exl\lTijJic C (a) 
------------------------ -- -- 
11\n 
- --- 
y- z=x, 
. 
8Posing___ 
--- - -- 
------------------ ------ - - - 


:Vhlch is ox 
l 
----- 
--------- 
C (b) 
Hence it is seen that 


1n tho 
" act Y what is done in Example 
· 
. 
· · 
1 d 
· 
b th 
Case of tl . 
l 
Ll d only subLractwn IS wvo vo ' ~n 
o pro 
us scco.nc me 10 
cesse 


h. 'l'hc :rn ~ 
. 
. . E , mplo cis becoming more common, 


because of ~tho~ illu~ t~·atod 


1~ :::o in m11nipulation. It is termed 


the subtra t s smlphmty anc 
orical groups employed as k ying 


groups 
. c or method and Lhe num . ra Jh 85 more will be said about 


th· · ate called subt1·acto1'S. In P11111g 1 


Is lnethod 
84. Rep · t' 
·ng-keY additives and subtractors.- a. 
In the fore ea. lng or relcur~~o number wbich was added or subtracted 
in 
· gomg oxmnp os 
hi' 
d 
cuciphm 
L 
1 v11ys tho s11roe but t s nee not, of course 
b 
. 
·men w11s a ' · 
. 
f 
b 
' 


O true. It is possible to employ a sequence o · ~um ers for addition 


01' subtraction, the sequence being agreed upon m advance or it mn,y 
be easily derivable from a key phr_asc, etc. Thus, suppose tho placode 
Ulcssn.go is tho same as in Lhe provwus examples and that the repeating 
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key is 432 09721 nnd t,hn t, t,his key is employed according to the sub- 
LracLor mcUJod explained in subparagraph ,r; (3) above. Note tho 
following: 


(a) EnciphrrmrnL: 


(l) H peat,ing- key - - ------ ---- -- 
(2) Placode. 


(3) Encicodc 


-~----------- - --- 


(b) DcciphenuenL: 


(1) HepenLing kry ---------- - -- 
(2) Encicode. ___ 
----- - - -- - -- 


(3) Placode_ _ 


4328 
0972 


5517 3082 
9811 
7990 


4328 
0972 


9811 
7990 


5517 3082 


1432 8097 2143 
9015 6710 9541 
2427 2387 3602 


1432 8097 2143 
2427 2387 3602 
9015 6710 9541 


b. LL is import,ant Lo not, 
LllaL such a key as ihe foregoing must 
be of f1 l ('ngt,lJ ihaL docs not, con tain a factor in common with Ll10 
1engL1J of Lhe code group involved in t,he ncip1JCrmenL, for if it does 
conLain a common fact,or LlJe period will be abbreviated. For example, 
in L110 foregoing case, since t,h r epeaLing k ey cont,ains 9 digits and 
the code groups 4 digits, t,iJ 
Jengt,h of t,he enciphering period is 9 


groups, Lbat is, two .identical placode groups must be at least 9 grou~s 
apart b?fore Lbey will produce identical encicocle groups. But Jf 
the _keymg sequence were 10 digiLs in Jengt,h tl1is phenomenon of 
cyclic repetition could happen if L/10 i lent,icnJ placode groups wore 
but. 5 groups apart,, since tho common fn cLor 2 cuLs the potentinl 
keymg lengt,h in half; and if th keying sequence were 12 digits in 
length LlJc period would be bu t 3 groups. In this 001111ection see also 
tl1C remarks under }Jal'agraph 49c of tl1is iox t. 
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85. Nonrepeating additives and subtractors.-a. When special 
tables arc employed a 
Lh ' ourcc of Lhc adder or subtractors for 


~uperenciphcring code, a much more secure ystcm is provided. 
The 


ablcs may be contained in a book or document called a lceybook, an 
additive boolc, or a subt1·actor· boolc. 
On each page of such a book 
groups of numbers arc regularly disposed in rows and columns on the 
page. By applying idontifyittg symbols called indicators to the pages, 


~s :Well as to the rows and tho columns on each page of the keybook, 
It IS possible to provid for Lhe safe supcrcnciphcrmcnt of a large 


v~lume of traffic. All corrcspondcnLs must of comsc, be provided 
With th 
. 
' 
l 
' cr 
th . 
0 same bas10 code book and the sam keybook. In emp oymb 
0 koybook tho indicators toll the recipient of a message what groups 


~cr~ ~c~; that is, ~h rc to b gin in Lhc dcci?hcrmcn~ of t~e encicode. 
f 1. from a typrcal koybook of this sort JS shown m Fl~- 48· . 


· · t should bo noted that whcth r the arbitra.ry numencal giOups 
m the k b 
h 
th.ing 
t d 
?Y ook are employed as adders or as subtractors as no 
0 o Wlth th 
. 
1 
. the !aLter may be 
usc l 'tb 
e nature of the groups thcrose vcs. 
d 
c 01 
cr w 
. . 
. 
. 
d 
1 the corrcspon - 
cuts a . 
ay, prov1dcd consistency JS observe an( 
lu 
h 
t 


the 
gree as to whether the crroups will be employe~ t ·oug do~ 


messages :. th 
b 
. 
. h ·mont) 1Uustratc m 
Exampl A 
lll · c additive manner (m cncJp 01 
nel' illus- 
e 
(a) 
f 
. 
h 
bbractor roan 
trated in 
o paragraph 3e, or m t 
su 
tbis example arc 
shown t Example 0 (a), of parngraph 83U· d ~n umbered blocks 
wo s t 
f 100 
. . 
dispose 
Ill n 
each co t . 
0 
4- hg1t groups, 
To designate a 
n ·aming 10 
l 
0 
vs of groups. 
. l 
group as th . . . 
co umns and 1 ro' . 
1Ci herment, or decip 101'- 


:mcnt 't. 
e lnitlal one to be employed In Cl 
p ber the row number 


' 1 1s mer 1 
. 
h block num 
' 
. h · r· 
and th 
o Y necessary to cr1vc t e 
lo 8850 IS t e me 1- 
o colum 
b 
For exa.mp ' 
cator f . 
n number of the group. 
1 tho successive groups 


in the or .tho group 6126. It ~s usual to ta ;; to right and from the 
top do~Olmal order of reading, i. e., fro~ l~ rea.ding may be agreed 
upon bc~wards, although any other ord~~, ~roro which this example 
N"oen correspondents 
The bo 
~ . . 
200 crroups, roakmg 
was take 
. 
· 
h 
n tamwg 
"' . . 
. 1 
f 
10 000 . n eonslstcd of 50 pages oac co f 
urse consist meie Y o 
d' \ 
10 all. 
The O'roups themselves, ol ~o in p~eparation. 
lgl ·s selected at ?'andom ;hen the ]<eyboo ( lds ·n Example B of para- 
c. Ref . . 
d illustrate 
1 
. 
t 
d 
Olrmg back to the mcLho 
d · both enCipbermen an 


~ra~)~ 839 (2), in which addition is ?~plo~e h:.ment the complement of 


theelp crment it was noted that In dcCIP 
t be used in order to re- 
e add't· 
' 
. h ·mont mus 
. 
1 lve employed in onCJP ei 
the basis for preparmg 


~over the placode. 
This principle serv:_.;additives, the other half, 


t~~books in which half the conte~t~ 
1la.tion of indicators it is possible 


to eu· complom~nts. By proper ro:~ftrary groups for encipherment, 


h use any g1ven page of the . . 
the complements) must be used 


w ercup 
·fi 
(contammg 
· 
bl 
f 
on a spcCI c page 
b . sly requires cons1dera e care 


or decipherment. Tbis method o vwu 


580405°--44----8 


~ 
1 
2 
3 
4 
5 
6 
7 
8 
9 
r- 
- 
- 


~ 
5~87 5344 
~1~8 
396~ 3477 
2~75 
~157 
56~7 3681 
1948 
1 
4136 
5532 
3884 
5286 
~727 
4~18 4327 
84~1 6151 
9323 
2 
787~ 
5~86 
7~21 7165 
828~ 
63~3 5325 
5241 
0376 
4739 


3 
5465 
6382 
75~9 8938 
8461 
~624 4878 
6883 
1539 
584~ 


4 
1685 
3147 
7116 
7654 
3766 
511~ 2646 
~353 6038 
9316 
88 5 1 6126 
9524 
5178 
3818 
1458 
2915 
8753 
0134 
2848 
3217 
6 
6667 
2409 
6932 
729~ 1357 
7176 
7658 
8334 
4335 
5991 


7 
5297 
2~99 2626 
3970 
4642 
9251 
5~54 5870 
98~ 1 4863 


8 I 0367 
3693 
8875 
0822 
7694 
5742 
6178 
8259 
9987 
4765 


9 I 6502 
8685 
4829 
3466 
2720 
0934 
6124 
9647 
4047 
8127 
1-' 
-- 
,_.. 
0 
0 
6673 
6979 
4382 
4347 
3812 
9280 
3464 
3789 
9498 
9581 
1 
8625 
8347 
9189 
3619 
4730 
5330 
7359 
2183 
7743 
0419 


2 
3829 
8413 
0541 
0920 
3663 
5733 
2602 
5464 
2740 
9811 
3 
5923 
7427 
1118 7849 
2558 
3324 
6369 
6663 
3~51 
~947 


4 
2153 
4254 
¢167 4467 
3¢53 
1532 7762 
4125 
¢877 3334 


89 5 
8727 
8613 
3244 
2312 
0268 
8549 
8843 
5282 
7259 
1552 


6 
6348 
1810 
4756 
8611 
259¢ 
2556 
9345 
9112 
4753 
6169 


7 
5378 
6976 
8833 
0935 
2621 
9213 
7674 
3427 
0830 
3896 


8 
0244 
1751 
5242 
8801 
1546 
7680 
4662 
7727 
1866 
267¢ 
9 
6989 
1418 
9552 
9309 
8664 
0187 
3873 
7253 
3260 
9309 
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in preparing the kcybooks, so n.s Lo insure Lhat complementary pages 
are present and arc properly indicated; iL also involves much more 
care to insure that the groups on compl mcnLary pag 
are accmaLe, 


although there ar mcchanica1 methods of preparing cries of com- 
plements of t his type. 


d. If a keybook for an additive or a su"QLractor system i used once 
and only once,. security of ~n al solute order is imparted to the messages 
even if the basu code boolc ~s known to and possessed by the enemy. It is 
not even ncccssa17 to usc indicators except where a question may 
arise as to the scr~al order of one of two or more messages arriving at 
about the same tnnc. In. such a case the system is referred to as a 
one-time system and the k ybook is called a one-time pad because the 
pages are usually fastened securely in the form of a tablet or pad and 
are destroyed as soon as it is c01·Lain Lhat the recipient of a mcssaa-e 
bas properly dcci~hcrcd and decoded it. The disadvantages of su~h 
a system arc two m number, boLh very serious. In the fu·st place Lhe 
productioD: ~nd dis~rib.u Lion of Lhc pads pr sent very difficult problems 
in cornposiLlOn, prmLmg, assembly of sheet , etc. For voluminous 
correspondence many pads arc necessary and the mere question of 
the producti?n, timely disLribution, and proper safekeeping of the 
pads is a senous one. In the second place, a system such as this is 
suitable for only two co1-respondents a.nd even in tlus cas th re usually 
must be two pads, one for incominO', the other for ouLgoing messages, 
otherwise it will occasionally or frcqu nLly happen thaL both corre- 
spondents will nsc the same series of additives or subtractors. 


e. The foregoing difficulLics make it d sil·ablc to modify the system 


so that wbilc its secmity may not be absolute it can be employed by a 
larger nu:rnbcr of correspondents, cutting down on the number of pads 


quired and permitting of intercom.mw1ication among all correspond- 


re ts 
For such usc, indi ·ators are absolutely essential in order to 


;:cultate the prompt decipherment of messages re civcd from several 
different correspond nts, 
f. The security .of a ~chcme .su~h as the foregoing. is dependent 


the manner m which the mdicators are treated ill the crypto- 
upon 
· d. 
· 
· 
l 
th t · 
bing processes. If the ill ICators are g1vcn U?- c ear, 
a 
1s, 


g~ap 
t disguise of one sort or another, it becomes possible to study a 
Wlthou 
1 
h 
· h 
. 
f encicode messages and perhaps to so ve t em, even Wit out 


senes 


0 
. on of the code. 
On the other hand, if the indicators are 
ssesst. 
. 
. 
· 
· 
·d· 
ll d · 
d 
po ro.sel--ves d1sgmscd by enmpherillg them accoi illg to a we - 
~s1gne 


the 
d the system as a whole becomes very secme and may, illdeed, 


rnethO d~ impregnable against attack for a very long time. 
be :co.a Concluding remarks on arith~eti.cal methods.-a. ~he 


B6 · -t has no doubt perceived by thi~ t1~e that the foregomg 


st~de:J:l. etical methods arc, in reality, subst1tut1on methods . . :w?ere a. 
~:~oup is added or subtracted from the placode group this 1s easy 


• 
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to see. 
For example, if Lhc JJxC'd nddiLivo is 3089 and tl10 plac~de 


group is 8752, Lbc cncicodo group is 173L. 
This is Lhc same as saymg 


that a 4-alphaboL sysLem is involved, and Uw a.Jp]HtboLs are as follows: 


Placode__ _ _ _ 
1 
2 
3 
4 
5 
6 
7 
8 
9 
0 


{ 


~ i ~ ~ : ~ ~ ~ ~ ~ ~ } "C' h " 


Alphabet No. 
~ 
~ 
~ 
~ 
~ ~ : 
~ ~ ~ ~ 
1p or 


NoLo that merely a simple cyclic displacemcnL of values is involved in 
Lhc process, Lhc amo un.L of displaccmon L being gov rncd by the par- 
Licular dig.iL in caclr pos.iL.ion of Ll10 addiLivc group. 
What this 


a.mounLs Lo, in crypLogrn.plric Lcrms, is a 4-alphabct cnciph rment 
using direct sLandard aJphabcLs, where Lhc "normal alphabet" is 
1 2 3 4 5 6 7 8 9 0. Tbc process could be made more difficult by em- 
ploying "mixed alphabcLs" of course, but Lhcn the foatUl'c of speed, 
which i now possible (in view of our early Lraining in addition, 
wl10roby Lho men Lal nriLbm Lie involved becomes second nature), 
would be losL, since consLanL r fcrcnco would hn.vo Lo be made to 
oncipJJ ring and deciphering Lables. 


b. H becomes clear LLaL when 11 series of difl'eront adcliLivcs or sub- 


trn.ctors is used, as when 11 koybook is employed, then Lhe number of 
alphabcLs involved conesponds Lo Lho number of digits employed. 
Thus, dcspiLo Lh facL Lbn.L Lho cnciph rmont process is hero one that 
involves merely Lho numerical oq uivnlcnLs of direct standard alpha- 
bois, tho sysLom can have groaL crypLograpbic security, depending 
upon (1) how long Lhe keying seq uonco is, that is, the number of 
groups comprising Lho addiLivc or· subLmcLor series ; (2) the composi- 
tion of Lhis keying seq uonco, Lhat is, whcLher iL consists of random 
cLigiLs or is systcmaLic in iLs consLrucLion; and (3) whoLher this sequence 
or parts of iL arc used only once or several Limos. 
Tho last-mentioned 


facLor is the most imporLanL of Lho Ll1rcc, for if the keying sequence or 
purLs of it are used buL once or a very limited number of times, say 
2 or 3, its recovery by cryptanalytic processes is difficult or impossible 
and therefore even if Lho sequence is systematic in its constructiion 
this fact mighL not become known. 
However, as 11 rule Lho additives 
or subtiractors arc merely digiLs solccLcd by a purely random means 
such as drawing them out; of a box, or equivalent means. The length 
o! tihe sequence is g ui~cd only by Lho amounL of traffic to be superen- 
ciphcred; for a volummous traliic, keybooks containing thousands of 
groups are necessary, even wiLh a good indicator system, and even 
then the books must be changed at frequent intervals. 


c. Arithmetical methods are Loday very frequently employed and 


arc fa:or~d a~o:rc mosL oLhor methods of suporcnciphcrment because 
of therr srmphc1Ly and relatively beLLer speed of opcmtion tihan in 


113 


the case of a1phab ticnl m ihods. The sp<' l1 fndor is of <'OUl"Sl 
attributable to tb 
[aci thai praclicull r 'Vl'ryho<.ly 
Cl\11 lldll (or 


subtract) rapidly nnd accmal ly when single di~it. an' invol ('d, 1\lHl 
although very similar proccs. cs 
ould b 
nppli ·d in cryptographic 


processes involving leiters of Lhe alphnbcL, l1w Opl'rt'ttion.· of 1Ull1ilion 
or subtraction woulcl proceed very much more slowly hccnusc our 
early training docs nol drv Le any time i 
arillmwii 't\l proC'l'Ss' 


involvi:ng loiters. For cxamph•, lW 'ry child lrnrns lhaL " 
plus 5 


equals 13" bui none l arns that" 11 plus l~ cq\ln ls }, 1." 


cl. However, ih sc ariLlun 'Lien\ mclh ds ha e Lwo s rious disad- 


vantages. FirsL, Lher 
is Lh 
disn,dvanLngc LhaL lhe fint\l pncic-odl' 


text is compos cl of numbers. The laLLrr arc n L only more suhj' l Lo 
en ors in tclcgro.pbic handling Lhn,n Ill'' kLLcrs, hut lllso iL is more 
difficult to correct guTbl d gr ups when flgures m· inv lv d ilum when 
letters arc involved. 
These disn.clvanLnges ar , it must be admitted, 


more serious in Am ricun pmcLic ', when cmph nsis in tmining is lnid 
upon. the telegraphic tmnsmissio11 £ l LLers and not figur •s thnn Lh ey 
arc in other pra Liccs; Lhey nu1y n L hold in r •gn.nl t 
ountrit>s whcr 


tho emphasis in irn,ining is in ih oLhcr di.r 
Lion, Ggur s b ing pre- 


ferred to leiters. Second, Lhe physical pr edur' invol •d in Lh c 
prOl)!1ration, reproduction, disLribuLi n, and accounLUIO' of Lhc n 
es- 


sary kcybooks or adders or subLrn.cLors arc Lclli us, cosily, 1.1.nd Lime 
consuming. Wborc ])l'OV.tsion musL h 
made for vohnninous inter- 


communi.caLion am ng many units find for r ln.Li. ely 1ong p ri ds 
f 


time, th sc matL rs consLiLuLc a di1fteulL if noL impossibtc probl m 
for Lhc compiling n.g ncy. 


0 


\ 


/ 


